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Google must consider how its phone 
network will be different, says 
Nielsen Mobile's Agarwal. 

Gphone Rumors 
Hint at Broader 
Mobile Strategy 

BY ALEX HANDY 

Google, the darling of Silicon 
Valley, could soon become the 
belle of the mobile service 
provider ball. 

According to unnamed sources 
inside Google, the company is 
embarking on a strategy to join its 
nationwide fiber-optic networks, 
the 700MHz spectrum, an x86- 
based handset and a brand-new 
JavaScript engine as a platform 
underlying its "Gphone" project. 

But even without these leaked 
details, Google's broader business 
moves are already telegraphing 
the individual pieces of the puzzle. 

Specifically, Google CEO Eric 
Schmidt's bold offer to purchase 
the entire 700MHz spectrum in 
the upcoming FCC auction hints 
at a broader wireless play from 
the company. Although his initial 
continued on page 41 ► 



Long-Awaited Leopard 
Shows Its Xcode Spots 



BY P.J. CONNOLLY 

Apple late last month released 
the long-anticipated Leopard 
vipdate to its Mac OS X operat- 
ing system, with hundreds lined 
up in front of its stores, and 
countless others who chose to 
order online waiting for the 
delivery truck. 

Mac OS X 10.5 had been 
delayed by the company's move 
earlier this year to focus develop- 
ment resources on pushing the 
iPhone out the door at the end of 
June. That decision has presum- 
ably been validated by the appar- 
ent success of the device, 



although with an iPhone SDK 
expected in February, the post- 
ship vacations for Apple's own 
developers will undoubtedly be 
brief. 

The Leopard client software 
incorporates new search and 
user interface features, such as 
Spaces, which allows users to 
create multiple desktops. Brows- 
ing through a folder of unorga- 
nized documents will no longer 
be the same experience, as the 
new Quick Look option provides 
a full-screen preview of a file. 
The Time Machine backup tool 
provides users with a simple set 



of tools for backing up, restoring 
and migrating data. 

Leopard Server includes new 
tools for creating podcasts and 
wilds. The new iCal Server, an 
open, standards-based calendar 
server that requires no client 
licensing, is part of the package. 
It implements the WebDAV- 
based CalDAV specification, 
which is supported in iCal 3.0. 

Apple's Xcode IDE has been 
updated for this release with full 
garbage collection and perfor- 
mance improvements that the 
company claims allow it to load 
continued on page 37 ► 
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Sun Rising on Broader Appeal 



After some tough years, company is pulling off a turnaround 



BY ALEX HANDY 

When the dot-com bubble burst 
in 2001, many companies got 
wet. Sun Microsystems was 
among those caught in the turbu- 
lence, as many of its best hard- 
ware customers went out ^^^ m 
of business or scaled back 
their purchases. Howev- 
er, not all of Sun's woes 
directly related to the 
Web or the over-exuberance of 
venture capitalists. 

Instead, the commodity serv- 
er and the emergence of Linux 



JAVA SE 

UPDATE N 

COMING 

PAGE 3 



system pushed Sun to the brink. 
But Sun's employees have toiled 
to turn the company around, 
with a recent return to profitabil- 
ity and renewed attempts to win 
friends and fix problems. The 
^^^ m secret behind the 
attempted comeback 
has been a broadening 
of Sun's markets and 
customer base. 
In 1999, Sun's stock began to 
climb toward its all-time high of 
US$60.37 per share. In just three 
years, the stock would split three 



as an enterprise-level operating times and then plummet down to 



just over $2 per share. Today, the 
company's stock is at a post-bub- 
ble high price of just under $6. 
But the company hasn't come 
roaring back to life; the shadow 
of 2006, when the company lost 
more than $800 million, is still 
blocking out some of that pre- 
cious Wall Street glow. Yet, 
on the watch of new CEO 
Jonathan Schwartz, Sun's rev- 
enues have steadily grown while 
expenses have been trimmed 
through consolidation, layoffs 
and the closing oi one Silicon 
continued on page 38 ► 



'Oslo' Taking 
Model-Driven 
Development 
Mainstream 

BY DAVID WORTHINGTON 

Microsoft's next major invest- 
ment is in model-driven devel- 
opment. The initiative, dubbed 
project "Oslo," will be a multi- 
year, multiproduct effort to 
develop new technology for 
customers to build, deploy, 
design and manage composite 
applications. 

The technical investments 
from Oslo will be incorporated 
into the next generation of its 
application platform. The road 
map, revealed at the company's 
SOA and Business Process 
Conference in late October, has 
five key components: BizTalk 
Server release 6, BizTalk Ser- 
vices release 1, Microsoft .NET 
Framework version 4, Microsoft 
System Center release 5 and 
continued on page 38 ► 




Human productivity needs to be 
addressed, says Microsoft's Kawasaki. 
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Preaching Code Safety to Software Providers 

Education the focus of new SAFECode organization's online resources 



BY JEFF FEINMAN 

IT industry leaders have 
joined together to create the 
Software Assurance Forum for 
Excellence in Code (SAFE- 
Code), an organization dedi- 
cated to helping software com- 
panies create and deliver 
secure products. 

The founding members are 
EMC, Juniper Networks, Micro- 
soft, SAP and Symantec. The 
organization was announced late 
last month in London. 

SAFECode's Web site is 
intended to be an online 
resource, helping to identify 
and share best practices for 
assuring that software functions 
as intended without introduc- 
ing defects or vulnerabilities, 
promoting broader adoption of 
such practices into the cyber 
ecosystem, and working with 
governments and other infra- 
structure providers to influence 
vendor practices and manage 
enterprise risks. 

"There are lots of associa- 
tions and thinking going on 
around security as it relates to 
the end user, but we are taking 



a vendor approach, and we are 
talking about what we should 
do in our own product," said 
Eric Baize, senior director of 
product security for EMC. He 
added, "We are one degree 
removed from the practitioner, 
and we found that it is very dif- 
ficult to find information that 
could be applicable to end- 
based practices and a product 
organization. That's really the 
gap we want to fill." 

SAFECode officials said 
that they believe some vendors 
lack an understanding of best 
practices that enable customers 
to securely use their products. 
Other vendors are wary of shar- 
ing best practices, Baize 
claimed, leading to this infor- 
mation gap. 

INDUSTRY HOLE 

SAFECode was created after 
the founding members agreed 
that the industry lacked a vehi- 
cle for communicating best 
practices. "The main driver 
was the realization by a few 
vendors that the practices we 
were doing around our own 



products was not very well 
known by our customers and 
by the market in general," 
Baize said. "It was very clear 
that as each of us was engaging 
with our customers, we saw a 
lot of interest from our cus- 
tomers in trying to learn what 
we are doing and how the cus- 
tomer could apply it into their 
own development processes." 
SAFECode will continue to 



develop its road map, but right 
now training and education are 
at the top of the list. The mem- 
bers have also been discussing a 
"security development life 
cycle," which involves thinking 
about security throughout the 
process of software creation 
and taking security into account 
during coding, testing and 
deployment. 

"Software assurance is a crit- 



ical element of IT ecosystem 
security," said Paid Kurtz, exec- 
utive director of SAFECode. 
"By building on the positive 
work already done in this area 
by individual firms and encour- 
aging broader adoption of 
proven best practices, SAFE- 
Code has a unique opportunity 
to significantly impact the over- 
all security of the cyber infra- 
structure." I 



GPL Suit Settled With 
Compliance, Money 



BY ALEX HANDY 

The first GPLv2 rights infringe- 
ment lawsuit in the United 
States has been settled, a month 
and 10 days after it began. 

The Software Freedom Law 
Center announced on Oct. 30 
that it had reached an agree- 
ment with Monsoon Multime- 
dia on behalf of its clients, Erik 
Andersen and Bob Landley. 
The software developers sued 
Monsoon Multimedia on Sept. 



20 alleging that their open 
source project, BusyBox, was 
modified and used in Mon- 
soon's HAVA TV video appli- 
ance, without the company 
redistributing its changes as 
required. 

"Although we really hated 
having to ask our attorneys to 
file a lawsuit to get Monsoon 
Multimedia to abide by the 
GPL, we are extremely pleased 
that they worked so hard and so 



fast to come into compliance," 
said Landley. 

Under the terms of the 
agreement, Monsoon Multi- 
media will make available all 
of the modified source code it 
has created for BusyBox. Also, 
the company will appoint an 
open source compliance offi- 
cer, whose job will entail 
ensuring GPL compliance 
going forward, and to contact 
customers and inform them of 
their rights to the software 
under GPL. 

Landley and Andersen were 
also compensated with an 
undisclosed financial settle- 
ment. I 



Java SE Update N Incoming 

Update seeks to fix on-going problems on client side 



BY ALEX HANDY 

Java SE is being prepared to 
take on the role of the core ver- 
sion of the platform, according 
to engineers at Sun Microsys- 
tems. 

Sun is rebuilding the Java 
experience for consumers, 
with work proceeding on Java 
SE Update N, which aims to 
fix the many problems con- 
sumers have had with Java on 
the client side. Chet Haase, 
Sun's Java SE client architect 
in the client software group, 
said in late October that the 
coming client-focused update 
will address many of the classic 
Java problems. The problems 
include slow startup time, 
trouble with version control, 
and the bloat of the runtime 
environment. In preparation 
for the coming of JavaFX, a 
strictly consumer-targeted in- 
terface paradigm, Haase said 
that Sun needed to fix the user 
experience for the Java Bun- 



time Environment. But that's 
just the beginning. 

James Gosling, vice presi- 
dent and Sun fellow, said that 
the forthcoming Java SE 
Update N is the first step 
toward converging everything 
on the Java SE specification. 
He admitted that this is "going 
to take years. We've come up 
with a strategy that lets us 
segregate the universe into 
things that change quickly, and 
things that change slowly, 
and we've come up with a 
developer story that addresses 
them all." 

That means Java ME and 
Java EE are destined for the 
dust heap. Their functionali- 
ties, however, will continue on 
in the form of modular addi- 
tions to the Java SE platform. 
Gosling made it clear that 
this move is about the simplifi- 
cation of the platform, not 
the removal of any capabili- 
ties. He emphasized that 



this move toward a single Java 
would not happen overnight. 

BETA IN DECEMBER 

The first step on that larger, 
longer road to a single Java will 
begin at the end of Ql 2008, 
when Sun is expected to release 
Java SE Update N. A beta of that 
update will arrive in December, 
built with a new focus on the 
client-side problems that have 
plagued the language since its 
creation. The update seeks to 
speed loading times for Java 
applets, and to bring in a com- 
mon method oi polling the ver- 
sion information for the installed 
client-side environment. 

"Update N is about improv- 
ing the consumer experience. 
We're fixing some issues in the 
consumer experience with the 
Java platform. [We asked,] 'If 
we're going to really hit hard in 
the consumer space, what are 
some of the issues we need to 
address?'" said Haase. 



That means a new installer, 
faster load times and an easier 
path for developers to identify 
the version installed on the end 
user's machine. Despite the 
maturity of Java, Haase stated 
that developers have lacked a 
reliable method for detecting 
the version of Java that the 
client uses to compile and run 
an application. 

One target for die Java SE 
Update N is Web advertising. 
Haase admitted that applets and 
Web ads rarely, if ever, use Java 
today. "Applets are not there in 
the Web ad space because [they] 
really need to start up very quick- 
ly. We created a project called 
'quick starter,' " Haase continued, 
which performs such actions as 
"preloading die disk cache so 
when yovi run Java, it starts up in 
die time someone would expect 
for very lightweight applications." 

All of this work, said Haase, 
will right the wayward ship that 
has been consumer Java. Haase 




The Java SE update is about 
simplifying the platform, says 
Sun's Gosling. 

and Gosling hope that the work 
beginning in Update N will lay 
the foundation for the coming 
of JavaFX, Sun's consumer-tar- 
geted development and pre- 
sentation environment. 

That environment should 
also arrive in its first full form 
around the same time that the 
final version of Java SE Update 
N arrives, but Haase cautioned 
that JavaFX is currently running 
on its own development cycle, 
independent of the Java SE plat- 
form. I 
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Feedback's the Issue 
For .NET Framework 

How much should Microsoft accept? 



BY DAVID WORTHINGTON 

One of the pitfalls of being 
open is that one has to be will- 
ing to accept criticism, some- 
times savage and unsparing. 

Microsoft's decision to give 
developers visibility into the 
underlying source code of the 
.NET Framework libraries is 
bracketed with questions about 
how it will handle feedback on 
bugs and suggestions for 
improvements. 

Microsoft has remained 
mum on the topic, but one 
thing is for certain: It will not 
work like an open source pro- 
ject. Due to the proprietary 
nature of the code, legal 
experts have said that any sug- 
gested fix a developer submits 
to Microsoft could be inter- 
preted as an unauthorized 
derivative work. 

Scott Guthrie, general man- 
ager of the Microsoft Develop- 
er Division, revealed last 
month that Visual Studio 2008's 
debugger will download the 
.NET Framework source code 
from a Microsoft Web server to 
help developers learn more 
about its behaviors while they 
debug their applications. It will 
be available when Visual Studio 
2008 ships in 2008. 

The intellectual property 
therein is protected by 
Microsoft's most restrictive 
Shared Source license: the Ref- 
erence License, a read-only 
license that does not grant 
rights to copy, modify, recom- 



pile or redistribute code. 

In an interview last month, 
Dino Chiesa, director of the 
.NET platform, explained the 
company's rationale: Allowing 
outsiders to build on and con- 
tribute to the .NET codebase 
could produce the unwanted 
effect of undermining the plat- 
form's reliability. 

Microsoft initially will offer 
the source for the .NET Base 
Class Libraries, as well as that 
for ADO.NET, ASP.NET, Win- 
dows Forms, Windows Presen- 
tation Foundation and XML. 
More components will follow, 
including Language Integrated 
Query, Windows Communica- 
tion Foundation and Windows 
Workflow Foundation. 

SD Times spoke with four 
regional directors of the Devel- 
oper Platform evangelism 
group, volunteers recognized 
by Microsoft for technical 
expertise, to get their impres- 
sions of the new openness. 

One of them, Patrick Hynds, 
president of security consultan- 
cy CriticalSites, invoked the 
"teach them to fish" story. See- 
ing the code and not having to 
guess at what it is doing will 
make it easier for the develop- 
ment community to use 
Microsoft's tools and solve their 
own problems, he said. 

UNCHARTED TERRITORY 

Jon Rauschenberger, CTO of 
Clarity and also a Microsoft 
regional director, said that 



Microsoft is faced with an 
interesting challenge: offering 
support for a hybrid model 
that falls somewhere between 
open source and proprietary. 
In an open model, "the sup- 
port side is more acute. Devel- 
opers look at the code and say, 
'I know this bug. How do I as a 
customer submit and get the 
appropriate level of feedback, 
given that I can come to the 
conclusion that this appears to 
be a bug?' " he said. 

Microsoft's existing bug 
reporting system is limited to 
Microsoft Connect, a Web- 
based reporting system that is 
open to all customers. 

Rauschenberger explained 
that while Microsoft Connect 
historically has been a "very 
appropriate and great" feed- 
back tool for Microsoft's cus- 
tomers, a more appropriate 
mechanism for dealing with 
shared source issues is neces- 
sary moving forward. 

Microsoft partners such as 
Rauschenberger have close 
relationships with the .NET 
product team. "I can get a clear 
answer without ambiguity," he 
said. Partners can also use 
Microsoft Connect to track the 
status of a bug as Microsoft 
reviews it internally. Regular 
users typically do not have that 
level of access. 

He projected that three to 

six months after the release of 

Visual Studio 2008, "there will 

continued on page 30 ► 
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Microsoft Connect helps customers track issues as they are addressed internally by the company. 




Businesses Tapping 
Into 'Communities' 

Power to the people 



BY ALEX HANDY 

Community has become a 
buzzword. Like many buzz- 
words, there is a reason for the 
sudden business interest in 
community building and uti- 
lization. Thanks to My Space, 
enterprises have awakened to 
the power of people prowling in 
packs. Rut large businesses are 
quickly learning that packs of 
humans aren't as easy to man- 
age as packets of bits. That's 
why internal-facing community 
sites aren't just IT's problem. 

Steve McDonald, vice presi- 
dent of strategic business solu- 
tions for Optimus Solutions, 
spends his days helping compa- 
nies tap the power of social net- 
working software. These sys- 
tems tend to become an 
evolution of existing human 
resources systems, said 
McDonald. 

Those HR systems, said 
McDonald, contain information 
on everyone inside of an organi- 
zation, but typically, only the 
HR team uses them. "If HR 
wasn't updating that info, it was 
only partially useful," he 
explained. "With [IRM's social 
networking software] Lotus 
Connect, the end user is given 
rights to introduce their own 
photo; it's not that badge photo 
of them taken on the day they 
started where their hair is all 
messed up. It also offers addi- 
tional fields and free form text 



areas where people can con- 
tribute background information 
and personal interest things," 
said McDonald. 

That sort of personalized 
information is more useful than 
rote facts input by hiring man- 
agers. "It allows people to iden- 
tify with the person, or just 
identify the person. The intro- 
duction of the ease with which 
people can manipulate their 
profile has allowed the business 
to introduce that concept 
quickly," said McDonald. 

However, McDonald noted, 
"you find the people who are 
dying to contribute [are] just 
not always the right people con- 
tributing the right info." 

SOCIAL NETWORKS 

Software development man- 
agers don't have to worry too 
much about that type of prob- 
lem, said Chris Miller, director 
of messaging and collaboration 
at Connectria and operator of 
thesocialnetworker.com. The 
role of developing and imple- 
menting content standards typ- 
ically falls to IT operations and 
HR. For developers, these new 
social networking systems are 
typically hands-off after the ini- 
tial installation. 

"The main role for the 

development side is [to handle] 

any customization of the default 

template set, or adding custom 

continued on page 30 ► 
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Microsoft Hopes Popfly Falls In for a Base Hit 

Mashup creator integrates with Facebook, other social networks 



by JEFF feinman ordinary users share applica- verlight, caters to anyone, says without code and share on social 

Microsoft in late October tions, mashups, gadgets and the company, even people with networks such as Windows Live 

released a beta version of Web pages. no programming experience. It Spaces and Facebook. Microsoft 

Popfly, a tool aimed at helping Popfly, built on Microsoft Sil- gives a way to create mashups Popfly enables users to add, for 
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example, eBay auctions, games 
and slideshows to blogs, Face- 
book profiles and personal Web 
pages. It can leverage blocks 
from Popfly partners, such as 
Dapper, Facebook and Twitter, 
to drive awareness and traffic to 
a user's site. "Popfly enables you 
to create static Web pages and 
even insert custom mashups 
directly into your static page," 
said Dan Fernandez, lead prod- 
uct manager for nonprofessional 
tools at Microsoft. 

"Popfly is in this category of 
rich Internet applications — rich 
capabilities at the user interface 
to provide easy ways to build 
mashups," said Jason Bloomberg, 
a senior analyst with ZapThink. 
"This space is really quite crowd- 
ed; there's a lot of different play- 
ers, so it makes sense for 
Microsoft to have its own offer- 
ing. The alternatives, however, 
are generally platform-neutral, 
so that's the battle that Microsoft 
will continue to have... in the 
Web 2.0 world." 

Bloomberg added that peo- 
ple are starting to realize that 
Web 2.0 is not any single ven- 
dor's project, so Microsoft's tradi- 
tional ways of having developers 
work solely within its environ- 
ment may not hold up as well. 

'SWITZERLAND OF PLATFORMS' 

Popfly did not offer Facebook 
integration in its May alpha 
release. "Microsoft has had a 
great relationship with Facebook 
since 2006, starting with AdCen- 
ter," Fernandez said. "Our goal is 
to be the best set of tools, regard- 
less of platforms. We want to be 
the Switzerland of platforms. 
For example, Popfly has services 
from a variety of platforms, such 
as Yahoo and Flickr. At the end 
of the day, that helps our prod- 
ucts, such as Silverlight and Win- 
dows Live." The Popfly beta also 
allows the creation of gadgets for 
Windows Vista Sidebar and Win- 
dows Live. 

Microsoft is continuing to try 
to aid consumer-focused devel- 
opers with Windows Home 
Server, a platform that focuses 
on ease of use. Fernandez 
called it part of Microsoft's 
"companywide outreach" aimed 
at encouraging development in 
the areas of (Xbox) gaming, 
robotics and Web applications, 
with Windows Home Server as 
the base technology. I 
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Jazz Working in Concert With Rational 

IBM collaborative environment ties in ALM tools; December beta set 



BY JEFF FEINMAN 

IBM's Jazz collaboration envi- 
ronment is getting closer to 
product form. 

John Kellerman, IBM Batio- 
nal's product manager for Jazz 
and Eclipse strategy, said that 
the second beta of Bational 
Team Concert, the first Jazz- 
based commercial product, 
should drop in early December 
and become generally available 
in mid-2008. Team Concert is 
an agile-oriented, real-time col- 
laboration portal for software 
development teams. 

"It's coming along nicely, 
and we're engaged with the 
community and getting good 
feedback," Kellerman said. 

With application life cycle 
management heading toward 
an era of openness and third- 
party tools, Kellerman said that 
the Jazz collaboration environ- 
ment is in line with that trend. 
Companies such as CollabNet 
and Kovair, as well as the 
Eclipse project, have devel- 
oped methods of integrating 
disparate tools from different 
makers to link different aspects 
of ALM. 

Originally, Jazz was an inte- 
gration platform for tool-build- 
ing, but it has been refactored 
into an Eclipse integration plat- 
form for building applications. 
"What you have in the Jazz plat- 
form is an open, extensible plat- 
form built on Eclipse, so it's 
using an extensibility model 
that we all know," Kellerman 
said. "And that is precisely why 
we did it. By building on this 
open-standard infrastructure, 
we are engendering that kind of 
community growth, including 
third-party offerings." 

UNIVERSITY COLLABORATION 

IBM has also announced that 
three universities were given 
Jazz Faculty Grants in an 
attempt to further communica- 
tion and collaboration capabili- 
ties among software develop- 
ment teams. The University of 
California, Irvine is exploring the 
use of multimonitor environ- 
ments to improve project aware- 
ness and development practices. 
Two Canadian universities, the 
University of British Columbia 
and tire University of Victoria, 
are utilizing the collaboration 
capabilities of Jazz and research- 
ing software development team 
interactions and communication. 



The University of British 
Columbia is involved in the 
Emergent Teams project, using 
the Emergent Expertise Loca- 
tor tool, which was built as an 



extension to the Jazz platform. 
The Emergent Expertise Loca- 
tor recommends members of 
an emergent team for a current 
problem, deriving information 



on how files have changed in 
the past and who has participat- 
ed in such changes. 

Meanwhile, the University 
of Victoria has developed proto- 



types that address challenges in 
software collaboration by help- 
ing team members visually 
understand social and artifact 
relationships. I 
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Hands-Off Approach 
To SOA Deployment 



BY DAVID WORTHINGTON 

Attempting to manually redeploy a ser- 
vice-oriented architecture can be a cost- 
ly and risky proposition, as it is labor- 
intensive and introduces the risk of 
human error. Recognizing that, Progress 
Software is trying to help customers 
remove the human element and auto- 
matically roll out SOA deployments. 

Progress Sonic Deployment Manager 
(SDM) allows enterprises to model all 
aspects of large-scale Sonic SOA deploy- 
ments and test would-be production 
environments prior to deployment. It 
automates repeatable installations and 
configurations, and may be used within a 
project development life cycle to move 
components from one staging environ- 
ment to the next. 

Product marketing manager David 
White claimed that SDM cuts costs by 
allowing SOA deployments to be cloned 
from a single central location; employ- 
ees are not sent on site and have no 



physical presence. SDM also helps orga- 
nizations bring SOA components online 
faster because it makes the test and QA 
cycle more efficient, he added. 

White explained that SDM creates 
configuration files to deploy at remote 
sites. SDM pushes it out based on a 
model developed by systems architects 
and operations staff. Models are written 
in a proprietary scripting language that 
is similar to XML. 

White explained, "The architect and 
IT operations people build a model of 
what the configuration should look like 
and do not need to understand the bits 
and bytes of how Sonic is deployed. The 
deployment takes the model and per- 
forms installs and upgrade; the docu- 
mentation is in the form of the model." 

SDM can pull as well as push: It fea- 
tures a rollback capability that can yank 
a faulty configuration out of production 
and send it back to the QA lab for cor- 
rection. I 




SDM can be used through development, testing and QA into deployment. 

Oracle's Attempt to Buy BEA Stalls 



BY DAVID WORTHINGTON 

A headline-grabbing attempt to acquire 
BEA Systems has gone out with a whim- 
per, as Oracle decided to abandon the 
takeover proposal. 

In a statement on Oct. 28, Oracle 
said that it would not raise its bid, and 
that BEA should assume that it is not 
going to renew its offer. 

On Oct. 25, Oracle ratcheted up the 
pressure on BEA to accept its US$6.7 
billion buyout offer. It stated, "We 
believe that your counterproposal at $21 
per share price is an impossibly high 
price for Oracle or any other potential 
acquirer.... Nobody would seriously 



consider paying that kind of multiple for 
a software company with shrinking new 
license sales." 

Oracle submitted its offer for BE As 
consideration on Oct. 9. Although pub- 
licly prodded by financier and share- 
holder Carl Icahn to accept the deal, 
BEA has indicated that the proposal 
undervalues its worth. 

Lehman Brothers analyst Israel 
Hernandez believes that Oracle could 
still nab BEA. "In our view, the even- 
tual acquisition of BEA by Oracle is 
not an 'if,' but a 'when' and at what 
price," he wrote in a Oct. 29 client 
note. I 
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Microsoft has unveiled its Tester Center Web site, which provides 
testers of all types and skill levels the opportunity to share testing 
practices and experiences. James Whittaker, a security architect at 
Microsoft who has worked on the Trustworthy Computing initiative in 
both security and reliability, will contribute to the site (msdn 
.com/testercenter) with "Editor's note" entries . . . Ounce Labs has 
created the Ounce Global Alliance for delivering Ounce's enterprise- 
class source code analysis solutions to global partners. Partner pro- 
gram members will be able to leverage localized sales, technical sup- 
port and education with the goal of growing new market opportunities. 
This is part of an effort by Ounce Labs to increase its market in Europe, 
the Middle East and Africa . . . Online Excel spreadsheet manager 
eXpresso recently introduced a service that allows workgroups to 

upload, modify and compare their respective 
xAu MMtM J spreadsheets. Features of the service include 

a chat function that lets developers host 
group chats, and the "Alerts" function, which sends a message every 
time a spreadsheet is modified. eXpresso can be accessed anytime, 
and no installation is needed for existing Excel users . . . MetaLINCS, 
provider of enterprise software for electronic discovery, has 
announced its adoption of the Electronic Discovery Reference Models 
XML standard. This specification provides a framework for organiza- 
tions engaged in electronic discovery processes that wish to transfer 
electronically stored information to and from e-discovery applications 
and processes. MetaLINCs claims this will save customers time in con- 
verting electronically stored information from one system to another. 



NEW PRODUCTS 



j_ 



Software-as-a-service provider NetSuite has released SuiteFlex, an 
application development platform aimed at small-to-medium busi- 
nesses that enables the creation of third-party vertical applications 
within NetSuite, as well as end-to-end business process customization. 
A main feature of NetSuite's SuiteFlex is SuiteScript, an on-demand 
programming language that company officials said enables customers 
to build new workflows and applications. SuiteFlex applications can be 
shared as open source . . . Mantra Infotech, a Reading, U.K.-based 
company specializing in Web site design and Web app development, 
has launched an online venue, mantrainfotech.com, for developing 
Web applications and multimedia services. The site also focuses on e- 
commerce app development and search engine optimization 
. . . CDC Software, a provider of enterprise software 



applications, has announced four new products for 



V.-* 



its c360 Core Productivity Pack, a suite of devel- 
opment tools for the Microsoft Dynamics CRM platform: c360 Explor- 
er CRM Search Engine, which indexes all Microsoft CRM records; c360 
SharePoint/Microsoft CRM integration, which enables automatic cre- 
ation of a SharePoint site for required CRM entities; c360 Relationship 
Exploration and Charting, which uses Microsoft Silverlight technology 
to provide a relationship tree display of CRM records; and c360 Record 
Editor, which allows users to edit individual records. 

UPDATES 

i i 

Macrovision, a provider of tools for distributing digital goods across 
multiple channels, has released a new version of its multiplatform 
installation solution, InstallAnywhere 2008. Users of the new version 
can use the same project file to create installations for processor-spe- 
cific versions of common operating systems . . . Excel Software has 
released RbApp 2.1 for REALbasic developers. RbApp is a collection 
of reusable classes for developing Mac OS X and Windows software 
with REAL Software's REALbasic programming language. The update 
adds new properties and methods, such as the ability to manage exter- 
nal data stored in files through the RbGrid programming grid. External 
data can be linked to any cell within the rows and columns of a grid 
. . . Enterprise application creator Appistry has released Enterprise 
Application Fabric 3.7, which brings a new product capability called 
Affinity that allows data to be partitioned and distributed to individual 
computers within an application fabric. I 



Big Blue Masters Data 

IBM unifies its customer, product solutions 



BY DAVID WORTHINGTON 

Companies have gotten by for 
years without having a single, 
holistic view of data. However, 
just getting by may no longer be 
good enough. Data cannot exist 
in silos if a service-oriented 
architecture is to be used as a 
strategic business asset that 
cuts across lines of business. 

IBM began beta testing for 
Master Data Management Serv- 
er (MDMS) in mid-October. 
MDMS lassos together IBM's 
customer integration tools in 
WebSphere Customer Center 
(WCC) with WebSphere Prod- 
uct Center (WPC), a workflow- 
oriented product data hub. 

The combination puts in 
place a master data infrastruc- 
ture that attempts to centrally 
manage account, customer and 
product data. 

IBM is building in new data 
governance capabilities, deploy- 
ment options and extended sup- 
port for business processes. 
MDMS adds the ability to man- 
age customer accounts, compli- 
ance data, organization hierar- 
chies and product bundles. 

MDMS supports several 
implementation styles. Paraic 



Sweeney, vice president of IBM's 
product management and infor- 
mation platforms solutions 
group, explained that MDMS 
could coexist with existing sys- 
tems and bring in data on a batch 
basis using data models. MDMS 
is the authoritative source of 
information; entities created 
with the solution are fed back 
downstream, he explained. 

IBM is including a portfolio 
of industry data models. MDMS 
will have predefined integration 
points with IBM Information 
Server and can be used in con- 
junction to bulk-load, cleanse 
and normalize data. MDMS 
supports both IBM DB2 and 
Oracle Database. 

A second supported imple- 
mentation style is transactional 
data management, where data 
resides solely in a master reposi- 
tory and all applications use 
MDMS as their sole source of 
master data. The last way is to 
deploy MDMS as a registry of 
master information contained in 
the system for cross-referencing. 
This style creates a thin layer of 
information that provides a virtu- 
al view of the rest of the informa- 
tion, but only stores references to 



master data, Sweeney said. 

MDMS is "quite a big step 
forward" for IBM's data man- 
agement capabilities, converg- 
ing them all "onto the same 
page," said John Radcliffe, 
research vice president for 
CRM with Gartner. He expects 
that IBM will add more collab- 
oration and workflow function- 
ality in the future. 

MDMS makes use of tech- 
nology IBM acquired from 
Ascential Software and DWL, 
including Ascential QualityStage 
and DataStage, and DWL Cus- 
tomer. Radcliffe believes that 
those acquisitions greatly im- 
proved IBM's ability to sustain its 
data management effort. 

"IBM had a capable data 
model and business services sur- 
rounding IBM Profiler [WCC's 
forebear]," Radcliffe noted. That 
and the combination of IBM's 
capabilities for data integration 
and middleware integration in 
the data quality area, together 
with WPC, make MDMS a "very 
seriously capable product," he 
said. 

IBM Master Data Manage- 
ment Server is expected to be 
generally available in early 2008. 1 



Application Problems Plague Coders 

Survey: Bugs take an average of six days or more to resolve 



BY DAVID WORTHINGTON 

It seems counterintuitive to 
think that the biggest time-sink 
in the application production 
life cycle would receive the 
least regard from development 
managers. However, a survey 
published by Forrester Con- 
sulting has revealed that this 
conundrum is the cold hard fact 
for many organizations. 

The objective of Forrester's 
"Problem Resolution Survey 
Results and Analysis" was to 
determine where developers and 
testers are spending their time 
and to learn what is automated 
and what is not. The biggest time 
drain, according to the managers, 
directors and executives who 
responded: investigating and 
resolving application problems. 

According to Forrester, 
almost half of the respondents 
require more than an hour to 
document a problem, and a 
problem report uses six types of 
media on average. "That is inter- 



esting to us, given the large 
number of problems," remarked 
Schwaber. 

The respondents spend 
almost three out of every 10 
hours (29 percent) in various 
stages of troubleshooting: docu- 
menting, reproducing or testing. 
On average, a problem takes six 
days or more to resolve, and one 
in four of the problems reported 
by a QA or test group are 
returned as irreproducible. 

Of the time spent on defect 
resolution, 26 percent is spent 
reviewing information, 34 per- 
cent on reproducing the behav- 
ior, and the remaining 40 per- 
cent goes toward isolating the 
root cause of the problem. 

The trend is universal: For- 
rester's survey found no statisti- 
cally significant difference 
across verticals or between 
enterprises and ISVs. 150 orga- 
nizations were interviewed: 100 
enterprises and 50 ISVs, all in 
Canada or the United States. 



"[Forrester analysts] were 
surprised by this survey," said 
Forrester analyst Carey 
Schwaber, author of the report. 
"We looked into how well this is 
known within an organization, 
and one-third of managers 
underestimate time, and anoth- 
er third don't think about it or 
don't care about it." 

She added that two-thirds of 
the responding managers indi- 
cated that a solution that 
reduced the time spent on 
resolving application problems 
would be of interest if it created 
significant efficiencies and 
improved quality. 

To Schwaber, one solution is 
test automation, because 
automation solutions record 
everything that happened in the 
environment during a test. This 
could slash the time needed to 
gather information. "80 [per- 
cent] to 90 percent of people 
are still hitting the keyboard" to 
gather data, she quipped. I 
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This diagram shows how the API fits into the Xen virtualization stack. 



Microsoft to Open Up 
Hypercall API for Windows 

Server virtualization due next year 



BY DAVID WORTHINGTON 

Microsoft will make the hypercall API 
for Windows Server virtualization wide- 
ly available late next year under its Open 
Specification Promise, making it possi- 
ble for third-party hypervisors and oper- 
ating systems to interoperate seamlessly 
with its platform. 

At the Interop New York 2007 confer- 
ence last month, Microsoft announced it 
would extend the Open Specification 
Promise to include the hypercall API. In 
short, developers are free to copy, modify 
and utilize it without paying Microsoft 
licensing fees for its intellectual property. 

The Open Specification Promise 
includes Microsoft's implementation of 
Remote Shell SOAP and the WS-" fam- 
ily of Web specifications. 

The hypercall API will allow develop- 
ers to integrate their software with Win- 
dows Server 2008 and Windows Server 
Virtualization (WSv), code-named Virid- 
ian. It is the same API that Novell and 
XenSource have been developing against 
for interoperability with WSv. 

James Ni, senior technical product 
manager for virtualization at Microsoft, 
said that the API offers programmers 
access to very low-level constructs with- 
in the Windows hypervisor. Novell and 
XenSource are among those that have 
worked in partnership with Microsoft to 
make use of the Windows hypervisor. 

The hypercall API can be used to 
create adapters between WSv and the 
Xen hypervisor API, Ni explained. The 
adapter converts calls so that systems 
modified to run as Xen guests can func- 
tion on the Windows hypervisor. 

Microsoft is also working with Novell 
to create an adapter allowing SUSE Lin- 
ux Enterprise 10 to understand that it is 
working in a virtualized environment, he 
said. Microsoft would not disclose how 
customers would get the adapter. "We are 



not quite there yet. We just released the 
WSv Community Technology Preview." 

Ni touted Microsoft's efforts to 
make its technologies as widely avail- 
able as possible, adding that it intends 
to make the Windows Management 
Interface provider for WSv available to 
developers. WMI is based upon the 
work of the Distributed Management 
Task Force. Microsoft's Virtual Hard 
Disk image format specification has 
been available under a royalty-free 
license since June 2005. 

A draft of the hypercall API was first 
distributed at the 2006 Windows Hard- 
ware Engineering Conference. Major 
chip vendors, OEMs and VMware have 
had access to the specification, Ni said. 

A spokesperson said that Microsoft 
will provide draft documentation of 
Viridian s WMI API at the beta release of 
Viridian, and the company is working to 
conform its API to the DMTF standard. 

Windows Server 2008 is slated for 
release to manufacturing in the first hall of 
2008. WSv was delayed until 180 days after 
that release. 

"Microsoft needs a solid strategy to 
take over VMware once Windows Serv- 
er Virtualization will be out, and this 
strategy cannot be based only on a prod- 
uct's features. Customers don't switch a 
mission-critical solution like virtualiza- 
tion just because of one or two capabili- 
ties, no matter how important they are," 
said industry analyst Alessandro Perilli 
of virtualization. info. 

He continued, "So Microsoft is clear- 
ly basing its strategy on other, more 
appealing aspects. One of the most 
important ones is wide support from 
IS Vs. If Viridian will receive more 
acceptance than VMware ESX Server 
from the industry, at a faster pace, cus- 
tomers will have a concrete reason to 
switch." I 
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Microsoft Signs Another Linux Peace Treaty 

Turbolinux will get patent assurance, establish research lab 



BY DAVID WORTHINGTON 

The legal waters surrounding 
the intellectual property that 
makes up Linux have gotten 
murkier, as Microsoft has 
thrown another Linux vendor a 
legal life vest. Microsoft late 
last month cemented a patent 
indemnity assurance agreement 
with Tokyo-based Turbolinux. 

The announcement comes 
just weeks after Microsoft CEO 
Steve Ballmer said that Red 
Hat Linux users should cough 
up and pay Microsoft because 
Red Hat allegedly uses its intel- 
lectual property. 

Under the agreement, 
Microsoft will provide intellec- 
tual property assurance for Tur- 
bolinux customers who purchase 
Turbolinux Server — meaning 
that it promises not to demand 
any payments from them for 
alleged infringements of 
Microsoft's patent portfolio. 
The agreement also has provi- 
sions for developing interoper- 
ability solutions, and licenses 
Microsoft technologies for use 
in Turbolinux. 

Microsoft did not specify 
whether it would indemnify 
Turbolinux customers that were 
running GNU General Public 
License (GPL) v3-licensed soft- 
ware. GPLv3 is anathema to 
Microsoft, having been de- 
signed to take on this sort of 
indemnification agreement: It 
has stated that it is under no 
obligation to cover Linspire and 
Novell customers who run soft- 



ware under that license. Both 
Linspire and Novell, along with 
Xandros, have struck similar IP 
assurance agreements with 
Microsoft. 

In the area of interoperabili- 
ty, the companies will collabo- 
rate on a single sign-on solution 
for Turbolinux and Windows 
devices. Turbolinux has signed 
Microsoft's Workgroup Server 
Protocol Program evaluation 
license in anticipation of 
unspecified future technical 
collaborations. 

The agreement also calls for 
Turbolinux to establish an R&D 
interoperability lab to be 
housed in the same building as 
Microsoft's Beijing office, col- 
laborate on the Open XML 
document format, and join 
forces through Microsoft's 
Interop Vendor Alliance sales 
and marketing program. 

Additionally, Turbolinux's 
Fuji desktop will bundle 
Microsoft's Live Search tech- 
nology; it already deploys the 
Windows Media Format. 

In a prepared statement, 
David Kaefer, general manager 
for intellectual property licens- 
ing at Microsoft, remarked that 
the company was looking for- 
ward to building bridges 
between open source and com- 
mercial technologies, calling 
Turbolinux a "preferred" Linux 
partner. 

However, Microsoft's Janus- 
faced approach to Linux contin- 
ues. While the company is 



embracing Linux in East Asia, 
its CEO displayed quite a dif- 
ferent attitude recently in 
Western Europe. At a Micro- 
soft event last month in Lon- 
don, Steve Ballmer repeated 
allegations that Linux violates 
Microsoft's software patents, 
specifically targeting Red Hat, 
which has not signed an indem- 
nity agreement. Red Hat has 
stated that its customers are 
protected from liability under 
its Open Source Assurance Pro- 
gram, which provides indemni- 
fication against the claims of 
software patent holders. 

The Free Software Founda- 
tion has accused Microsoft of 
leveraging its patent portfolio to 
divide and conquer the free 
software community and to 
frighten users into using 
favored distributions to avoid 
the risk of being sued for patent 
infringement. Microsoft claims 
that Linux infringes upon 235 
of its patents, but so far has 
declined to provide further 
details, which has made some 
question whether in fact any 
infringement has occurred. 

Open source advocates 
claim that Microsoft is back to 
its old tricks of spreading fear, 
uncertainty and doubt. In 
recent statements, Jim Zemlin, 
executive director of the Linux 
Foundation, noted that Micro- 
soft has yet to identify a single 
infringed-upon patent, and 
claimed that Ballmer was creat- 
ing ill will in the development 



community and among its cus- 
tomers, many of whom are run- 
ning Linux. 

Red Hat may remain defi- 
ant, but other Linux vendors, 
including Linspire, Novell and 
Xandros, have taken a different 
tack by signing IP assurance 
agreements with Microsoft. 

Novell started the trend in 
November 2006, when it and 
Microsoft agreed to disagree on 
whether some of Novell's open 
source offerings infringe upon 
Microsoft patents. The compa- 
nies also set up a joint research 
facility to study interoperability. 

As part of the agreement, 
Microsoft is providing vouchers 
for support and maintenance of 
SUSE Linux Enterprise, Nov- 
ell's open source distribution. It 
has since added a rider onto the 
agreement stating that it will 
not distribute GPLv3-licensed 
software. Novell received 
US$348 million from Microsoft 
for patent cooperation and sup- 
port subscriptions. 

Agreements with Linspire 
and Xandros were announced 
in June. The agreements make 
patent covenants available to 
customers, which provide rights 
to Microsoft patents that may 
have been infringed upon. Lin- 
spire, Novell and Xandros are 
working on improving interop- 
erability between Open XML 
and the OpenDocument format 
and are members of Microsoft's 
Interop Vendor Alliance. 

Microsoft and Xandros have 



LINUX DISTR0S' AGREEMENTS WITH MICROSOFT VARY IN TERMS 



LINSPIRE: 

• Undisclosed financial terms 

• Intellectual property assurance agreement 

• Collaboration on document compatibility 

• Is licensing Microsoft digital media, instant messaging, search 
and typographic patents 

• Will sell a "patent" SKU bundling those technologies 

NOVELL: 

• Microsoft paid US$348 million for patent cooperation and a 
SUSE subscription 

• Intellectual property assurance agreement 

• Collaboration on document compatibility and virtualization 
techniques 

• Joint sales and marketing through Microsoft's Interop Vendor 
Alliance 

• A joint research lab to explore interoperability 



TURBOLINUX 

• Undisclosed financial terms 

• Intellectual property assurance agreement 

• Collaboration on document compatibility 

• Joint sales and marketing through Microsoft's Interop Vendor 
Alliance 

• A research lab to explore interoperability 

• Has signed a Workgroup Server Protocol Program evaluation license 

• Is licensing Microsoft Live Search technology and the Windows 
Media Format 

XANDROS: 

• Undisclosed financial terms 

• Intellectual property assurance agreement 

• Collaboration on document compatibility, server interoperability 
and systems management 

• Joint sales and marketing through Microsoft's Interop 
Vendor Alliance 

• Is licensing Windows communication protocols 



a broader agreement that calls 
for sharing intellectual property 
to accelerate deployments of 
interoperable solutions. Xan- 
dros is licensing Windows com- 
munications protocols. I 

SYBASE 

REFRESHES 

POWERBUILDER 

BY P.J. CONNOLLY 

Sybase has updated its Power- 
Builder 11 RAD tool and the 
DataWindow .NET component 
with new features designed to 
take advantage of the latest 
technologies in the Microsoft 
software ecosystem. 

PowerB uilder 11.1 now 
works with Windows Vista, and 
offers database driver enhance- 
ments, including new driver 
support for the Informix 10 
database platform. It also offers 
incremental compile for .NET 
Framework applications. 

DataWindow .NET 2.5 
offers an updated style for data 
source presentation and now 
allows developers to use a Web 
service as the source for a 
DataWindow. The so-called 
"TreeView" presentation style 
has been extended to include 
Web-based applications as well 
as desktop ones, and the 
DataWindow Designer is now 
available as a set of Visual Stu- 
dio 2005 plug-ins, so develop- 
ers have one less reason to leave 
the IDE. The standalone 
DataWindow Designer remains 
part of the package, which in 
this release adds support for 
Microsoft SQL Server 2005. 

"These enhancements rep- 
resent another milestone in 
Sybase's .NET Framework 
strategy," said product manager 
Sue Dunnell, "which is to pro- 
vide developers with an array of 
tools that solve the challenge of 
developing business-critical 
applications" while making best 
use of existing skill sets. 

PowerBuilder 11.1 and 
DataWindow .NET 2.5 will 
both be available on Nov. 15, 
and are sold separately. Up- 
dates to PowerBuilder begin at 
US$1,495 and new licenses are 
$2,995; DataWindow .NET is 
available for $645. I 






At Vitria Technology we did something 
unique in the software industry: 

We actually listened 

to what you wanted, 

then we built it. 



Business Accelerator™ & Resolution Accelerator 7 




Our founders realized the SOAand Process Integration 
solutions yog need now simply didn't exist. 
You asked for the flexibility to intemperate with any 
vendor's software instead of being locked into 
expensive products From a single large vendor. 
You wanted to save time and money in implementation. 
You wanted a way to systematically resolve process 
exception problems without involving an army of 
operational staff and you wanted it ample to use. 
easy to integrate and inexpensive to buy. 

So we built it for you. The result? 



Business Accelerator grid Resolution Accelerator. 

Products that work with your existing IT infrastructure, 

that preserve your freedom to add any application you 

need with no vendor lock-in, and resolve your 

process exceptions with minimal human involvement. 

For more information please call (B77) 365-5935 
or email at info@vftda.com. 

VStria Technology - The Power of Choice 
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Writing countless custom 

applications to access your data? 
Only ONE tool is needed, 
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Clearspring generates a menu that allows end users to bookmark and share widgets. 

A Case for Widget 
Syndication Tools 



BY DAVID WORTHINGTON 

The same tool set that big media compa- 
nies have been using for widget syndica- 
tion is now available to developers on 
the Web. Clearspring Technologies has 
decided that Launchpad, a tool that 
automates widget creation and provides 
access to analytics and reporting tools, is 
too useful to be kept from the public. 

Clearspring made Launchpad general- 
ly available in late October. Launchpad 
recognizes Web content that can be 
shared as widgets and generates JavaScript 
code that developers can use to embed a 
button or sharing menu into a site. End 
users can bookmark, embed or post the 
widget to Web sites, or share it via e-mail 
through its form-driven interface. 

Clearspring hosts analytics and 
reporting tools that enable widget cre- 
ators to track metrics in real time, includ- 
ing interaction, placements, time spent, 
unique viewers and widget views. The 



information is tracked by domain and 
widget with several visualization options 
and may be exported into Microsoft 
Excel. But the company's services don't 
stop there: Developers have the option 
of using Clearspring's hosting service to 
give their creations more visibility. 

One of Clearspring's principal in- 
vestors is America Online founder Steve 
Case, the merchant prince of early Web. 
Like the once ubiquitous AOL CD, 
Launchpad and its associated services 
are a volume play and are available free 
of cost. 

Hooman Radfar, Clearspring founder 
and chief executive officer, claimed that 
a developer could create a widget with 
Launchpad in 20 minutes or less. "It's a 
snippet of JavaScript code. You point to 
the section you want sharable and give 
the parameters — the buttons and menus 
the library lets you include for end 
users," he said. I 



Nitobi Gets 
Comfy With 
Dreamweaver 

BY JEFF FEINMAN 

AJAX tool provider Nitobi has released a 
component suite with integration capa- 
bilities for Adobe Systems' Dream- 
weaver, and updated its flagship compo- 
nent, Nitobi Grid. 

The Vancouver, B.C. -based company 
in early October shipped Complete UI 
2007, which includes nine AJAX-pow- 
ered components that it claims give 
developers of any experience level the 
ability to implement AJAX-powered 
designs in Web applications. 

Andre Charland, co-founder of Nitobi, 
said the integration with Dreamweaver 
will increase the company's developer 
audience. "Until now, most of our cus- 
tomers have been hard-core AJAX devel- 



opers," he said. "Now users can drag and 
drop our components into their applica- 
tions using Dreamweaver." 

Complete UI 2007's Grid, a cross- 
browser spreadsheet with Excel and Live- 
Scrolling support, allows the use of larger 
spreadsheets than before. LiveScrolling 
lets developers scroll through and edit 
large data sets in real time, retrieving 
blocks of data via AJAX requests. 

Complete UI 2007 offers other com- 
ponents as well, aimed at enhancing Web 
applications. ComboBox is a drop-down 
menu with autocomplete functionality. 
Complete UI Calendar is a calendar 
picker that can be used with Nitobi Grid, 
and Callout is a tool tip that prompts 
users with real-time feedback and 
instructions within applications. 

Other components include the Fish- 
eye tool bar menu, Spotlight for creating 
tours of Web sites and applications, the 
Tabstrip folder tab component and the 
Tree hierarchical data view. Finally, Nito- 
bi's AJAX Toolkit includes fully docu- 
mented tools that can be reused in appli- 
cations. I 
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Microsoft Shrinks 
Its Flagship's Core 

MinWin removes dependencies from 
Windows, reducing size and complexity 



BY DAVID WORTHINGTON 

The days when Windows was installed 
from a half-dozen floppies are long 
gone. As it grew in size and complexity, 
Windows consistently outgrew its media; 
although CD-ROMs accommodated 
Windows versions from 95 to XP, Win- 
dows Vista comes on a DVD. Now, 
Microsoft is working to chisel away at its 
flagship s complexity. 

The Windows 7 wave of releases will 
be built on top of a stripped-down version 
of the Windows kernel with additional 
core components, according to company 
distinguished engineer Eric Traut. 

During a talk Oct. 13 at the Universi- 
ty of Illinois at Urbana-Champaign, 
Traut discussed the work the Windows 
Core OS team has done to reduce the 
dependencies in Windows. The lighter 
core, called MinWin, is expected to be 
the foundation of future Windows ver- 
sions, including embedded products, 
Windows Media Center and Windows 
Server. MinWin is an offshoot of work 
that began when Microsoft was develop- 
ing Windows code-name Longhorn. 

Gartner research vice president 
Michael Silver said that with MinWin, 
Microsoft could be more competitive, 
responsive and flexible. And it would be 
making it easier for organizations to 
adopt, install and maintain Windows. 

'Windows Vista is so big. . .it affects 
both Microsoft's ability to come out widi 
new releases on a regular basis and for 
organizations to easily deploy it and 
upgrade it," Silver explained. "Plus, 
[Microsoft has] different platforms for 
handheld devices, desktop and notebooks. 
In order to be more competitive with Lin- 
ux and Apple, and to be more consistent, a 
slimmer base is needed," he added. 

Five years passed between die releas- 
es of Windows XP and Windows Vista, 
and almost two years were required to 
turn Windows 2000 into XP. In contrast, 
Apple has turned out three revisions of 
Mac OS X since 2002, and five since 2001. 

MORE DELAYS? 

Windows 7 is scheduled to ship in 2010, 
but, as widi Windows Vista, quality issues 
may lead to significant delays. In July, a 
prepared statement from the company 
noted that Microsoft expects a three-year 
time frame to deliver Windows 7. At the 
same time, the statement noted the final 
release date would be determined by 
"meeting the quality bar." 

MinWin at present consists of 100 
files, Traut noted, whereas a standard 
Windows distribution has roughly 5,000. 



The current MinWin build takes up a 
mere 25MB, but that's a long way from 
being user-friendly, as Traut acknowl- 
edged that the graphics subsystem, as of 
his talk, is not implemented. Even mini- 
mal installations of current desktop Win- 
dows versions occupy multiple gigabytes 
on disk. MinWin includes a rudimentary 
HTTP server that Traut invoked to 
demonstrate that it was indeed functional. 

STILL TOO BIG 

Traut said that MinWin was "proof that 
we've got a nice core inside of Windows." 
However, he remarked that it was still 
bigger than he would like it to be. 

Gartner's Silver believes that the 
extensive installed base of legacy Win- 
dows applications is to blame for the 
operating system's princely proportions. 
In essence, the applications that bind 
users to Windows are handcuffs for 
Microsoft as much as they are assets. 

"When [Microsoft has] stuff to sup- 
port legacy applications, that does beef it 
up a lot. The question is: How modular 
can they make it? At some point it might 
be necessary to install code needed for 
compatibility," Silver said. Nevertheless, 
he noted that MinWin is a major step in 
the right direction. 

Silver explained that modularity would 
make it easier to ensure that tilings do 
not break when Microsoft makes changes 
to Windows, and for users to pick what 
needs to be installed for compatibility. 

But modularizing compatibility as a set 
of components isn't the only choice, 
according to Traut, who also explained 
how virtualization could be used to re- 
duce backward compatibility problems in 
Windows, without further specifying how 
this might be implemented in Windows 7. 

When asked for more detail, a 
Microsoft spokesperson stated, "No deci- 
sions have been made — it's still an ongo- 
ing discussion for now." 

Traut remarked that the existing Win- 
dows kernel, which is between 12 and 15 
years old, is a little long in the tooth. "At 
some point, we'll have to replace it." 
Roughly 200 engineers are working on 
the kernel and die virtualization technolo- 
gies of Windows, according to Traut. 

MinWin is not Redmond's only en- 
deavor to construct a new kernel from the 
ground up. Singularity is the code name 
for a Microsoft Research project that fea- 
tures a made-from-scratch microkernel 
with no roots in Windows. In essence, the 
Singularity research team is building an 
entirely new operating system out of 
managed code. I 
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Curl Goes Straight to Developers With RIA 



BY DAVID RUBINSTEIN 

Curl, one of the early entrants 
into the rich Internet applica- 
tion world, announced late last 
month that it will turn over a 
substantial amount of code to 
the open source community, to 
help drive the creation of appli- 
cations to run on the company's 
platform. 

"We want to remove the 
concern that Curl is a propri- 
etary platform," said Richard 
Treadway, vice president of 
product strategy at Curl. "We 
are releasing things above the 
platform that are fairly mature." 

The company, which is tar- 
geting developers and their 
managers with the code release, 
will turn over its Web Services 
Development Kit, the Curl 
Data Kit and Curl Develop- 
ment Utilities, hosted at 
SourceForge under the Apache 
2.0 license. The Web services 
kit provides all the components 
necessary to support the con- 
sumption of SOA services via 
SOAP and WSDL, and 
includes an XML document 
model for processing XML. 
The data kit gives client-side 
access to SQLite and supports 
occasionally connected applica- 
tions, and the utilities offer best 
practices for developing Curl 
applications, according to 
Treadway. 

Curl will not release its run- 
time to the community, Tread- 
way noted, because it's important 
that the runtime exist only in one 
version that is solid and can run 
anywhere. Curl's solution con- 
sists of the runtime, which is giv- 
en away but not open source, 
with an IDE for creating Curl 
applications and the Curl pro- 
gramming language. 

CURL COMMUNITY SITE 

A parallel effort to drive devel- 
opment of Curl applications is 
the simultaneous launch of the 
developer community Web site, 
which will include a sandbox for 
uploading and executing Curl 
applications for testing, accord- 
ing to Treadway. The site also 
will offer discussion forums and 
training, he added. 

Curl, which was acquired in 
2000 by the Japanese company 
Sumisho, has seen a move away 
from client/server in Asia that is 
only just getting under way in 
the United States, according to 
chief strategy officer Jnan 
Dash. Business-to-consumer 



sites that require animation and 
graphics are driving rich Inter- 
net applications, he explained, 
adding that Adobes Flash and 
AJAX are prevalent in those 
cases. "But nobody's addressing 



the issue of enterprises that 
have process-centric apps," he 
claimed. "The problem is how 
to take high-cost client/server 
applications to the Web to take 
advantage of those benefits." 



Dash outlined the require- 
ments for an RIA platform for 
business-critical client/server 
applications. It must be Web- 
enabled, will have the ability to 
create and display highly com- 



plex UIs, must support enter- 
prise-class data sets, must run 
online and offline, and must be 
high-performance and highly 
secure. "We think of it," he said, 
"as a front end to SOA." I 



Intellectuals solve problems. 
Geniuses prevent them. 



- Albert Einstein 
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.INFRASTRUCTURE LOG 

DAY G?: We don't have ttie tools to "leverage open standards 
like Eclipse"" and LinuxT We have zero support. We need -ho 
do something but don't know where to start. 

_Gil formed o support group for the developers. Who knew 
he could play the guitar ond Narmontca at th-e same time? 
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GemFire Sets Data Grids Ablaze 

Distributed data manager sees cache, partitioning updates 

by P.J. CONNOLLY the modern era of multicore This gets especially tricky as tion disaster recovery scenario. 

There's been so much talk hardware and virtualized sys- companies seek to build distrib- GemStone Systems at the 

about the ways application tems that it's easy to forget data uted, resilient data architec- end of October announced the 

development has to evolve in has its own issues to consider, tures as part of a next-genera- release of GemFire Enterprise 
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"Bottom line: dtSearch manages a terabyte of 
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less than a second. " — InfoWorld 

Download dtSearch Desktop with 
Spider for immediate evaluation 
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5.1, a distributed operational 
data management infrastruc- 
ture that allows data sharing 
and event distribution in envi- 
ronments where clustered 
application processes need 
reliable and secure access to 
back-end data sources. 

GemStone architect Jags 
Ramnarayan explained that the 
large number of variables 
inherent to distributed systems 
significantly increase the possi- 
bility of error. Such stress- 
inducing points range from 
missed event notification to 
data consistency failures, all the 
way to application, operating 
system or hardware failure. 

GemFire Enterprise 5.1 
allows multiple levels of data 
redundancy. The partitioned 
data regions can be managed 
with user-defined policies, allow- 
ing events to be properly 
ordered without requiring locks 
or similar steps. This, die compa- 
ny claims, allows all data updates 
to be fed through die primary 
partition for a balanced memory 
usage profile. 

EVENING OUT EVENTS 

Event delivery is important in a 
clustered data environment, 
and GemFire Enterprise uses 
distributed event notification to 
permit the even spread of event 
updates across a data grid. It 
also allows the use of Object 
Query Language for executing 
"scatter-gather" algorithms. 

Users can control the way a 
workload is spread across the 
system, parallelizing data traffic 
to peers in an attempt to provide 
better throughput with multi- 
homed nodes. So-called "lazy" 
connections are also possible. 

The persistence implemen- 
tation is designed to allow every 
operation to be recorded, with 
log files designed to roll over at 
a configured size. The system 
also pulls log files back together 
to reclaim disk space, which the 
company claims results in a 50 
percent gain in throughput for 
synchronous persistence, and a 
full 100 percent gain for asyn- 
chronous persistence. 

GemFire Enterprise 5.1 also 
implements new native C+-+/C# 
client cache behaviors designed 
to enhance data sharing and 
cross-application collaboration. 
Since objects in the cache 
aren't always the same size, it's 
possible for a client cache to 
become fragmented; the Gem- 
Fire update implements heap 
LRU (least recently used) algo- 
rithms at the cache level to 
alleviate this. I 
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Nastel Puts Application Performance on AutoPilot 

AutoPilot M6 Suite monitors the health of apps and infrastructure 



BY DAVID WORTHINGTON 

Performance anomalies and 
bottlenecks are costly occur- 
rences. Developers must make 
the right technical decisions to 
reliably deliver critical business 
applications and satisfy regula- 
tory requirements and service- 
level agreements. 

Nastel made its AutoPilot 
M6 Suite application perfor- 
mance monitoring solution 
generally available at the end of 
October. AutoPilot M6 pro- 
vides transaction monitoring 
with infrastructure and subsys- 
tem management capabilities 
designed to help organizations 
meet performance goals. 

AutoPilot M6, designed for 
both service-oriented architec- 
tures and integrated systems, 
includes prebuilt modules that 
monitor IBM WebSphere 
Business Integrator, Java EE 
applications, Microsoft BizTalk 
and SQL Server, Oracle Data- 
base and TIBCO EMS. The 
separately sold AutoPilot M6 
for WMQ provides manage- 
ment and control of IBM Web- 
Sphere MQ middleware com- 
ponents. 

AutoPilot M6 integrates 
with HP OpenView to support 
applications that aren't support- 
ed out of the box. OpenView's 
Application Instrumentation 
Module brings in-house, legacy 
and other third-party applica- 
tions under AutoPilot's control 
to monitor application health. 

A Web-based operations 
manager with Unix-based con- 
sole support controls AutoPilot 
M6, and provides real-time per- 
formance monitoring and visu- 
alization both at a macro and 
infrastructure level. AutoPilot 
supports security management 
systems that use Kerberos and 
LDAP 

A complex event processing 
(CEP) engine, coupled with 
integrated business activity 
monitoring, powers AutoPilot's 
trend recognition and predic- 
tive problem prevention capa- 
bilities. AutoPilot also includes 
a distributed rules engine. 

AutoPilot M6 can trap met- 
rics and correlate them over a 
period of time; groupings of 
metrics are used to predict when 
events are going to happen. The 
event processing establishes 
what is normal behavior and 
users define alerts, events, 



policies and rules for correla- tel. The CEP engine works in a CEP is suited for enterprise rules engines, because users are 

tion, events, alerts and policies, distributed manner to scale service businesses and other able to make their calculations 

explained Albert Mavashev, performance. transaction-driven environ- based on the behavior of met- 

chiel technology officer of Nas- According to Mavashev, ments, and works better than rics spread out over time. I 
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RapidMind Supports AMD, Intel Multicores 



BY P.J. CONNOLLY 

RapidMind has taken its name- 
sake development platform out 
of the realm of niche processors 
and gone mainstream. The 
company on Nov. 5 announced 
RapidMind 3.0, which upon its 



release next month will add computations for instructions 



support for multicore CPUs 
from AMD and Intel to its 
capabilities. 

The platform incorporates a 
code optimizer that attempts to 
reduce overhead by analyzing 



that don't need to be performed 
in sequence. A load manager 
schedules the work from one 
core to the next, while a data 
manager sorts out the flow of 
information, and logging diag- 



nostic tools report performance 
bottlenecks and other mis- 
haps. Processor-specific sup- 
port modules allow the Rapid- 
Mind platform to communicate 
with the underlying hardware, 
while at the top of the stack, the 
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RapidMind API supports Linux 
and Windows applications. 

RapidMind claims dramatic 
improvements in performance 
compared with applications run- 
ning natively; a dual quad-core 
system scoring 100 frames per 
second on a digital media bench- 
mark rings up 10 times that fig- 
ure with RapidMind 3.0, accord- 
ing to the company's figures. 

RapidMind 3.0 will work 
with both Linux and Windows 
on AMD and Intel multicore 
processors, as well as with the 
ATI Radeon 1X00 and 2X00 
GPU families and NVIDIA 
GPUs. It also can run on IBM's 
9-core Cell RE, in that compa- 
ny's QS20/30 blade, and in the 
Sony PlayStation 3. I 

Embarcadero 
Offers Universal 
Data Models 

BY P.J. CONNOLLY 

San Francisco may have can- 
celed Halloween, but that 
didn't keep the city's Embar- 
cadero Technologies from cel- 
ebrating anyway. 

First, the company an- 
nounced the availability of Uni- 
versal Data Models for the 
ER/Studio data modeling tool, 
designed by author and model- 
ing expert Len Silverston and 
aimed at bringing data modeling 
to the masses of small- and medi- 
um-sized businesses. Embar- 
cadero claims that users of these 
models can save an average of 60 
percent in development and 
maintenance time. 

The data models are orga- 
nized into nine subject areas, 
ranging from accounting to Web. 
Seven industry-specific Univer- 
sal Data Models cover financial 
services, health care, insurance, 
manufacturing, professional ser- 
vices and telecommunications. 

The company also announced 
the release of updates to its 
DBArtisan database administra- 
tion tool and its RapidSQL 
development environment. DB- 
Artisan 8.5 includes a new 
engine designed for scalability to 
help database administrators 
cope with databases that keep 
growing in complexity and size, 
and a set of user interfaces 
intended to make customers 
more productive by simplifying 
standard cross-platform work- 
flows. I 
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Infosolve Unveils Data Quality Platform 



BY P.J. CONNOLLY 

It may not seem possible for data 
to rot, but it does. The problem 
isn't nearly as acute with neatly 
structured data; that's relatively 
easy to keep fresh and solutions 
for that sort of problem have 
existed for years. Instead, 
unstructured data is die chal- 
lenge facing enterprises today. 
Free text data in the form of doc- 
uments and messages is the 
missing link for many organiza- 
tions, foiling attempts at catego- 
rizing and integrating into a 
company's knowledge assets. 

Infosolve Technologies last 
month released OpenDQ ver- 
sion 2.0, a Java-based open 
source data quality and ETL 
(extract, transform and load) 
platform released under GPLv2. 
It includes reporting tools widi 
dashboards for monitoring data 
quality, and customer rule devel- 
opment for flagging noncon- 
forming records. 

The company's objective with 
OpenDQ V2.0 was to "provide 
businesses of all sizes innovative, 
cost-effective data integration 
and data quality solutions that 
maximize the quality of their 
data," noted company vice pres- 
ident Subbu Manchiraju. 

OpenDQ V2.0 offers users 
the choice of batch or interactive 
processing. Workflow and sched- 
uling capabilities are offered as 
well, with integration options 
into other enterprise data pro- 
cesses using drag-and-drop com- 
ponents. 

The data profiling tools allow 
users to develop standards while 
discovering hidden formats, pat- 
terns and rules. OpenDQ can 
generate reports on column 
minimums, maximums and 
averages, measure rule compli- 
ance across data sets and pro- 
vide point-in-time data profiling 
history. Reports are available in 
common formats, including 
CSV, HTML and PDF. 

OpenDQ allows users to 
develop data dictionaries, and 
the company offers external 
data enhancement along demo- 
graphic, firmographic and psy- 
chographic lines through a sub- 
scription service. The company 
uses grid computing technology 
from Sun Microsystems to sup- 
port its services infrastructure. 

'FUZZY MATCHING' 

Infosolve includes "fuzzy 
matching" in OpenDQ, identi- 
fying relationships with inclu- 
sive algorithms. It enables mas- 



ter data and reference data 
comparisons, and offers match- 
ing capabilities across multiple 
data attributes and multiple 
sources. 

Standardization and de- 
duplication are also in the 



purview of OpenDQ V2.0, 
which has the ability to com- 
pare against the master set, 
and offers auditing and log- 
ging of the de-duplication 
process. It also allows for 
removal of nonconforming 



data and so-called "noise." 

The unstructured data inter- 
face of OpenDQ uses natural 
language processing to capture 
key data elements from 
sources, and provides what the 
company claims is "seamless" 



integration of structured and 
unstructured data. 

Manchiraju noted, "We see 
this expansion of Infosolve's 
solutions as another step in our 
commitment to help businesses 
achieve maximum profitability, 
with comprehensive data inte- 
gration and data quality manage- 
ment solutions." I 
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Concurrency: The Compiler 
Writer's Perspective 

Google's Brian Grant discusses the problems of parallelism ft 





BY ALEXANDRA WEBER MORALES 

It's rare to find concurrency practition- 
ers with the right mix of technical insight 
and commercial software success. Brian 
Grant is a former software architect at 
Silicon Valley-based PeakStream, which 
was acquired in June by Google. Though 
he's tight-lipped about his current work, 
his concurrency background extends 
beyond PeakStream to include work at 
Lawrence Livermore National Labs on 
massively parallel machines. 

PeakStream grew out of the Brook 
stream programming language for graph- 
ics processing units (GPUs), which origi- 
nated at Stanford University. Peak- 
Stream's suite of APIs, a virtual machine, 
a system profiler and a just-in-time com- 
piler enables multithreaded applications 
to run on a panoply of hardware (multi- 
core x86 processors, CPUs enhanced with 
GPUs and possibly IBM's Cell). Before 
the acquisition by Google, PeakStream 
had aimed its multicore programming 



product at industries wifii obvious interest 
in high-performance computing: oil and 
gas, defense, finance and academia. 

All this gives Grant a unique view on 
what makes concurrency hard, and what 
will — or won't — make it easier. Though 
the conversation grazed only the surface 
of these issues, it was useful to gain a 
compiler writer's perspective on the 
problems of parallelism. 

SD Times: Is concurrency too difficult for 
developers accustomed to linear program- 
ming to grasp? 

Brian Grant: It is challenging, but I 
don't think it's too challenging. I do think 
certain languages, especially C and C++, 
make it very challenging to write robust 
big multithreaded systems. Basically, 
they have features that are hostile to 
concurrency. 

So the nondeterminism inherent in con- 
currency isn't a deal-breaker? 
I don't think so, not by itself. There are 
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tools and methodologies that can help 
developers cope with nondeterminism. 
However, many other features in the 
languages are problematic: for example, 
global and static variables in C and 
C+ + . In particular, if you're coming 
from legacy code where you may not 
have considered the impact of concur- 
rency, you may have lots of areas that 
will be problematic. 

The key is managing the complexity 
by imposing some kind of discipline. As 
with all software, you need to break it 
into components, layers and well- 
defined interfaces. You have to access 
shared data in disciplined way. C, C+ + 
and current compilers are inadequate to 
help in that way. 

Is it possible, as some say, that developers 
could simply ignore this issue and hope 
concurrency could be managed in the 
background, automatically? 
We're pretty far away from automatic con- 
currency or parallelizing compilers. The 
analysis that die system would have to do 
on the code would be pretty heroic. There 
are tools that can help, however. 
Is OpenMP the best approach, then? 
OpenMP is effective for a veiy limited 
set of applications: parallelizing hot ker- 
nels in numeric and scientific comput- 
ing. OpenMP doesn't fundamentally 
address the hard problems of partition- 
ing larger codebases. It works for Well- 
es o 

behaved array accesses. 

Libraries that hide internal paral- 
lelism from developers, such as the Peak- 
Stream Platform, are another approach 
that can also work well in certain prob- 
lem domains. At PeakStream we made a 
system that made it easy to write soft- 
ware for multicore chips. On multicore 
x86 CPUs, the PeakStream Platform par- 
allelized array operations to run on mul- 
tiple cores and also vectorized them to 
take advantage of x86 vector units. One 
feature the PeakStream Platform had 
that OpenMP did not was the ability to 
accelerate operations by running them in 
parallel on a GPU. 

Does your experience in compilers give you 
a different perspective than the average 
developer? 

It probably does. I've been working in 
compilers for more than 10 years, so I 
know how hard some of the problems 
are, but I can also imagine new analyti- 
cal tools and language features that 
would make concurrency easier. 

Existing languages such as C++ tend 
to favor ease of performance over ease 
of correctness. Higher-level languages 



favor ease of correctness over ease of 
performance. For example, in function- 
al languages such as Haskell, the code 
you write does not have any side 
effects. The model is that they don't 
modify existing data; they generate new 
data. The advantage is that it's easier for 
the compiler to reason about what dif- 
ferent components of the code can do. 

In a multithreaded C program, you 
could have two threads touch the same 
piece of data simultaneously, creating a 
race condition. In a functional program, 
that's impossible because they each cre- 
ate new data. However, it becomes a 
performance problem. How do you 
ensure that the compiler doesn't create 
excessive amounts of new data? In C and 
C++, it's easier to be efficient because 
it's easy to reuse and share data. 
What about interpreted languages? 
Java does seem to be ahead of C+ + . 
There's a notion of threads and concur- 
rency built in, whereas comparable sup- 
port is just now being addressed in C+ + . 
Are GPUs or the Cell processor the answer 
for increased performance with fewer con- 
currency hassles? 

Not for everyone. The performance 
characteristics are very different. Cer- 
tain applications run extremely fast; oth- 
ers don't. They're also much harder to 
program — the architectures expose a lot 
more complexity to software. 

In Cell, for example, there are two 
different instruction sets you have to 
worry about. 

The vector units on Cell have to be 
programmed in a different way from, 
say, x86 CPUs. They can't transparently 
load data from main memory; they have 
to do explicit DMAs [direct memory 
accesses] from main memory into local 
on-chip memory for both code and data. 
The vector units don't have a general 
purpose instruction set. Like GPUs, the 
vector units need to be programmed dif- 
ferently from mainstream CPUs. 

I don't think the .r86 instruction set is 
the problem. 

Who are you looking to for thought leader- 
ship on concurrency? 
That's a good question. There's a variety 
of interesting work out there, but I don't 
know that I've seen any compelling or 
complete solutions yet. Concurrency 
needs to be well supported throughout 
the whole software ecosystem: lan- 
guages, tools, libraries and legacy code. 
The C++ standards work going on is a 
good thing. I think the work on annota- 
tions to specify thread-safety properties 
is promising. Besearch on transactional 
memory is interesting, but it's not clear 
how it will pan out. Exploring functional 
languages is interesting, but achieving 
good performance is challenging. Viable 
industrial solutions based on the more 
experimental technologies are a number 
of years off. I 

Alexandra Weber Morales is the former 
editor-in-chief of Software Development 
magazine. 
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Microsoft's Code Release Raises Questions of Input 



-< continued from page 5 

be a frustration level with developers 
seeing, in black and white, [.NET] 
source code that amounts to a bug or a 
poorly performing function in the 
framework that they will not have an 
acceptable tool to remedy that problem 
with. No one could consider Ladybug 
[the internal name for Microsoft Con- 
nect] to be that tool. 

"This is an opportunity for Microsoft 
to tap into broader resources and make 
enhancements to its products going for- 
ward," Rauschenberger continued, sug- 
gesting that Microsoft should enhance 
its reporting system, or invent some- 
thing new that permits customers to 
describe code behavior, identify code 
and propose a fix for it. 

Author and Microsoft regional 
director Billy Hollis suggested that the 
company should make gradual adjust- 
ments to the system, such as changes to 
its registration system to improve 
access to information. Hollis said that 
it would be reasonable for Microsoft to 
let the first forays work in the existing 
bug reporting system so that it can get 
a feel of what it would be like before 
making any changes. 

Hollis thinks that Microsoft's existing 
bug reporting facilities may already be 
sufficient, and that it is a matter of wait 
and see until a significant number of 
people start reporting. Likewise, he not- 
ed that Microsoft has experience run- 
ning widespread beta programs and can 
scale up to accept feedback. He predict- 
ed that few bugs would be found. "The 
framework is very solid," he added. 

"Microsoft will have a high standard 
of acceptance; there are sophisticated 
behaviors [in the framework]. The num- 
ber of people that can say that 'this is a 
bug for sure' is not as large as you might 
think," said Hollis. 

FEEDBACK LOOP 

Microsoft has experience receiving 
feedback on its source code, since it 
happens with some frequency. 
Microsoft's patterns and practices 
group offers developers prescriptive 
guidance for building implementations 
of Microsoft technology. "They tell 
how and why they did it and provide 
source code in most cases," said Criti- 
calSites' Hynds. He thinks that the 
group may be up to the task. 

Hynds continued, "Releasing code 
for others to play with and give feedback 
on is nothing new to them. More people 
will make use of it, but not dramatically 
more," he said, suggesting that the nor- 
mal spread of innovation would buy 
Microsoft time. "The majority of cus- 
tomers may wait until the next version 
before they have interest in the code," 
he said. 

He noted that Microsoft has a process 




This is Microsoft's opportunity to enhance 
its reporting system or invent something 
new, says Clarity's Rauschenberger. 

in place for support and discussion about 
pieces of code. "Application blocks are 
probably the biggest example of what they 
are already doing: This is just an exten- 
sion," said Hynds. 

Chris Menegay a principal consultant 
for Notion Solutions and another 
Microsoft regional director, foresees fur- 
ther complications. Microsoft creates spe- 
cial "hotfixes" for some customers, while 
others must provide Microsoft Support 
with a specific Knowledge Base article 
number in order to access a download. He 
believes this practice can generate confu- 
sion about what is fixed and what isn't. 

He suggested that the best thing 
Microsoft could do would be to fix its 
hotfix system. "There is not much visibil- 



ity for everyone else that has the same 
problem and big lag time. There should 
be a more poignant solution [when] the 
source code is out to improve the ability 
for others to get hotfixes." 

WHOSE IP IS WHOSE? 

Clarity's Rauschenberger questioned 
what would happen if a customer sub- 
mitted a potential fix to Microsoft, and 
then claimed that its intellectual proper- 
ty was part of the framework after 
Microsoft's decision to use it. 

James Grimmelmann, an associate 
professor of law at the New York Law 
School, said that developer-filed patch- 
es would be defined as unauthorized 
derivative works under the Microsoft 
Reference License, adding that the 
license contains a clause that could be 
stretched to read as terminating a devel- 
oper's license to use .NET Framework 
sources if they tried to sue Microsoft. 

Grimmelmann explained that unau- 
thorized derivative works are not copy- 
rightable under U.S. law, and that 
Microsoft could actually make whatev- 
er use it wanted to of the patches with- 
out legal fear. "Moreover, Microsoft 
could sue the developers for copyright 
infringement," he observed, adding 
that the alternative of patenting a patch 
would run afoul of the requirement 
that patents be "sufficiently nonobvi- 
ous." 

"Of course, as a practical manner, I 
doubt Microsoft would [sue], R doesn't 
sound like they're encouraging develop- 
ers to submit proposed fixes in the first 
place," he said. He added that Microsoft 



could grant developers a license that 
allowed them to suggest patches to the 
company, with Microsoft taking full 
license to any such patches. 

Rauschenberger said he feels that a 
reasonable compromise would have 
Microsoft giving the community a rich, 
two-way communications vehicle for 
reporting bugs — with source code — but 
not accepting submissions for proposed 
fixes. 

Notion Solutions' Menegay opined 
that Microsoft might not be able to avoid 
reading derivative code, because devel- 
opers may insert code as part of the text 
of their feedback. "They may say, 'This 
code ought to be this as opposed to your 
three lines.' R raises an interesting point: 
Maybe there should be a check box 
denying IP rights." 

Mark A. Lemley, William H. 
Neukom professor of law at Stanford 
Law School, would not be surprised if 
Microsoft did just that. "Lots of plat- 
forms require participatory users to 
assign their creations within the system 
to the platform owner, [and] this seems 
somewhat analogous," he said. 

A Microsoft spokesperson declined 
comment, on the basis that there is no 
update to the process at this time. 

Hollis doubted that a flood of users 
will be submitting code, noting, "The 
source code is valuable for people to 
debug through the framework, espe- 
cially in edge cases when fault is not 
clear. The number of developers that 
go beyond that to say, 'This how it 
should be fixed' would not be huge," 
he said. I 



BUSINESSES TAP 
INTO PEOPLE POWER 

< continued from page 5 

fields, like something about the person. 
Most people go with the standard tem- 
plate set," said Miller. 

For initial installations, he continued, 
developers need to know "what they're 
pulling info from, know what data is 
important, and make the user interface 
something the users want to deal with." 
Since these are built primarily as Web- 
based systems aimed at novice-level 
users, the Web UI is likely the most 
important software asset in the social 
network stack. 

A simple interface speeds uptake, 
and "a major benefit is being able to 
find people by knowledge, once you get 
the profile system loaded," said Miller. 
Loading those profiles typically 
involves dumping data from an HR 
environment like PeopleSoft into the 
new system, but it can be sped along 
when users are encouraged to input 
their own information. 




Traditional management practices 
aren't entirely applicable to community 

management. 



-Sara Dornsife, head of marketing for 
Sun's Solaris operating system 



Ri this regard, social networks inside 
businesses are effectively metadata 
repositories for individual employees. As 
such, the utility of a social network, 
properly maintained, can far exceed that 
of an internal wiki, blog or forum. Even 
when company blogs have gone dark 
after initial "Hello, World" postings, the 
meta-data stored on each individual 
remains a potent and accessible piece of 
information that is immediately relevant 
to the entire business. 

DIFFICULT TO MANAGE 

A good community, however, is only as 
good as its shepherds. Even the most 
basic of forums requires a dedicated 



host to maintain standards of conduct 
and remove the spam. 

Sara Dornsife, head of marketing for 
Sun's Solaris operating system, said that 
traditional management practices aren't 
entirely applicable to community man- 
agement. In fact, she dislikes the phrase 
"community management" and dismiss- 
es it as a misnomer. 

Dornsife s experience with the Open- 
Solaris community has taught her that 
crowds can get unruly when they're 
unhappy. An angered community can be 
a tough customer to deal with, as quick 
communication also allows members to 
quickly jump on the them-versus-us 
band wagon. I 
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Newmerix Lays Out ALM for Oracle, SAP 



BY JEFF FEINMAN 

Enterprise application life cycle 
management tool provider 
Newmerix has released ALM 
suites that cater specifically to 
SAP and Oracle applications. 

The Superior, Colo. -based 
tool maker on Oct. 30 released 
Newmerix Automate for Oracle 
E-Business Suite and Automate 
for SAP. Both include versions 
of AutomateChange, Auto- 
mateControl and AutomateTest 
that have been tuned for the 
idiosyncrasies of their respec- 
tive platforms. 

AutomateTest implements 
automated testing to reduce 
labor costs and time, while Auto- 
mateChange ensures application 
compliance in less time, and 
AutomateControl lets die user 

JMS ADAPTERS 
FOR .NET SHIP 

BY DAVID RUBINSTEIN 

Java-to-.NET interoperability is a 
common requirement in large 
organizations with heterogeneous 
IT environments. JNBridge is 
doing its bit to help with the 
release late last month of two new 
JMS adapters — one for .NET 
and one for BizTalk Server. 

The Java Message Service 
Adapter lor .NET leverages 
Microsoft's WCF (Windows 
Communication Foundation) 
Line of Business adapter frame- 
work, resulting in an end point 
that is consumable in .NET 
while the other end uses JMS to 
connect to any legacy platform 
that supports it. The adapter 
comes with a designer and inte- 
grates with Visual Studio; devel- 
opers can create .NET clients 
with custom APIs that can be 
used to connect to a JMS server, 
according to Wayne Citrin, 
JNBridge s CTO. Metadata 
capabilities inside the WCF 
Line of Business framework lets 
users explore available queues 
and topics that can be baked in 
at design time, he explained. 

The adapter for BizTalk 
Server 2006 supports both the 
original and the B2 release, and 
can connect BizTalk Server 
orchestrations to the JMS infra- 
structure. 

Both adapters are built on 
JBridgePro, the company's flag- 
ship Java-.NET interoperability 
tool, which creates proxy .NET 
classes that mirror the underlying 
Java classes, Citrin explained. I 



prioritize projects and requests. 

"They're designed very 
specifically for the unique 
architecture and application 
structure of those applications," 
said Dan Gannon, CEO of 
Newmerix. "With SAP for 



example, [the tools are] written 
in SAP's native language, and 
the change application is 
designed very specifically to 
manage SAP transports and the 
environment in which they 
reside, so it's very specific to the 



application provider." 

Newmerix is attempting to 
manage the entire life cycle of 
change across enterprise appli- 
cations, the tools are designed 
to help assess the impact on 
business processes resulting 



from application changes. 

Gannon said that the 
Newmerix tools observe and 
manage the change and quality 
assurance process at the metada- 
ta level for Oracle and SAP 
application environments. With 
that, customers can be clearer on 
decisions involving changes that 
are being tested and deployed. I 
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'F Is for Functional in Microsoft's New Language 



BY DAVID WORTHINGTON 

Anyone who thinks that func- 
tional programming languages 
are extinct everywhere but in 
the insular world of academia is 
in for a surprise. Microsoft is 
transferring an experimental 
programming language called 
F# (pronounced: F-sharp) from 
its research labs into its prod- 
ucts. Now, Microsoft is ready to 
use what was nearly dismissed 
as yesterday's technology to 
tackle the programming chal- 
lenges of today. 

F# is a hybrid functional and 
object-oriented programming 
language that was created by 
researchers at Microsoft's Cam- 
bridge, U.K., lab to demonstrate 
interoperability between differ- 
ent programming paradigms. It 
has roots in the ML family of 
functional programming lan- 
guages and is compatible with 
OCaml. The researchers also 
drew concepts from C# and 
Haskell, another functional pro- 
gramming language. 

A prototype F# plug-in for 
Visual Studio 2003 and 2005 pro- 
vides a graphical development 




'Many computer science 
departments around the world 
teach functional programming 
languages today.' 

-S. Somasegar, Microsoft developer division 
corporate vice president 



workspace for developers. The 
plug-in assists with type infer- 
ence, a feature present in strong- 
ly statically typed programming 
languages such as OCaml. 

Functional programming 
languages such as APL, Erlang 
and Lisp treat computation as 
the evaluation of mathematical 
functions. Object-oriented lan- 
guages largely displaced them, 
as the industry opted for anoth- 
er layer of abstraction, retiring 
the "let" statement. 

"I am a big fan of technology 
transfer between a research 
organization and a product 
development organization so 
that we can 'productize' the 
great research ideas and deliver 
to customers in a timely man- 
ner," wrote Microsoft developer 
division corporate vice presi- 



dent S. Somasegar in an Oct. 24 
blog posting. Somasegar pro- 
nounced F# as one of the best 
things that has happened at 
Microsoft since establishing its 
research division 15 years ago. 

"Many computer science 
departments around the world 
teach functional programming 
languages today," he claimed. 
"We believe that through F# and 
languages such as IronPython 
and IronRuby we can help offer 
students and educators choices 
beyond the current mainstream 
and enable the use of these lan- 
guages across the curriculum. 
This helps educators have the 
option to use Visual Studio as a 
consistent tool set from course 
to course," Somasegar wrote. 

Somasegar added that ideas 
from functional programming 



languages are helping Microsoft 
address some of the biggest 
challenges facing the industry 
today, including the "impedance 
mismatch" between data and 
objects and the challenges of 
programming in a world oi mul- 
ticore and parallel hardware. 

RIDING OCAML 

But don't plan on F# being pro- 
ductized anytime soon. Jay 
Roxe, group product manager in 
Microsoft's developer division 
said, "Microsoft has not yet laid 
out a schedule for the formal 
release of F#. The plan is to get 
community feedback during the 
development phase with CTPs 
and beta releases that develop- 
ers can try out along the way." 

Microsoft worked on F# in 
collaboration with members of 
the OCaml community, includ- 
ing Xavier Leroy, a primary 
developer of the Objective 
Caml system and senior scien- 
tist at the French National 
Institute for Computer Science 
and Control. The end result is 
that Caml code can now be 
ported to .NET, and F# code 



can be run with OCaml. 

What makes F# unique and 
different from Caml is that it 
combines the attributes of a 
iunctional programming lan- 
guage with the object model of 
.NET It has immediate access 
to the .NET Framework's APIs, 
shares its tools and integrates 
directly with Windows. F# can 
create .NET components by 
producing ILX, .NET's inter- 
mediary language, or compile 
into .NET binaries. C# and F# 
can call each other directly due 
to this aspect of its design 

"The best F# code develop- 
ment experience is currently 
with Visual Studio 2005 and 
.NET 2.0, or VS 2008 Beta 2 
and .NET 3.5," said a Microsoft 
spokesperson. 

Additionally, F# supports 
dynamic linking, preemptive 
multithreading and SMP 
machine support, and Unicode 
strings — features unavailable in 
other ML language implemen- 
tations, according to Microsoft 
Research's project Web site. It 
also provides interactive script- 
ing that is akin to Python. I 
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If VoIP Had a Hammer 

It'd hammer out functional, load testing all over this LAN 



BY ALEX HANDY 

Empirixs flagship Hammer G5 VoIP 
functional and load testing products will 
arrive in a single offering for the first 
time in the first week of December. 

As the fifth generation of Empirixs 
dedicated presence and voice communi- 
cations testing product, Hammer G5 
includes more than 65 testing scenarios 
aimed at ferreting out errors, overflows 
and integrity issues that may arise from 
using VoIP and other Internet-based 
voice communication systems. 

The Hammer G5 product line is 
divided into one software-based and 
two appliance-based versions. Previous 
editions of Hammer were divided into 
functional and load testing products, 
but Duane Sword, vice president of 
product management at Empirix, said 
that load testing for VoIP has rocketed 
to prominence in the past three years. 
As such, his company decided to spend 
18 months merging the two products 
into one. 

Hammer G5 comes as a software 
solution for laptops — priced around 
US$10,000— or as either a 2U rack- 
mount or multi-U blade server that can 
be purchased for around $100,000. 
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Empirix's Hammer G5 gives developers and IT managers a way to try out VoIP installations, 
through both functional and load testing. 



Sword said that Hammer G5 offers 
many unique test suites for VoIP and 
other enterprise phone systems. The 
Hammer G5 is designed to be plugged 



directly into the VoIP server via Ether- 
net, where it then impersonates a func- 
tional network. Once plugged in, Sword 
said, Hammer G5 can help to diagnose 



many of the problems that plague VoIP. 

"You've got standard scenarios, such 
as voice quality testing and testing the 
different codec types. We have feature 
testing for video telephony. There are 
tests for echoing, both acoustic echo 
and background echo," said Sword, 
"which is a chronic problem for VoIP. 
We have test suites for conferencing 
and voice-mail applications. We've 
been spending a lot of money and time 
fixing fax over IP. At least one VoIP 
company is losing subscribers because 
faxing has issues." 

Beyond the inherent problems with 
faxing over VoIP — IP packets don't 
always arrive in order, yet fax technolo- 
gy relies heavily on the exactness of 
timing — Hammer G5 offers, for the 
first time, the ability to test push-to-talk 
systems such as those offered by Sprint. 
Other new tests allow developers to 
check for SIP errors by sending out 
malformed packets and cataloging the 
resultant effects on the VoIP network. 
Sword said that G5 also includes new 
denial-of-service attack scenarios to 
test for the effects of malicious attacks 
on VoIP networks. 

Hammer G5 is compatible with all 
previous Hammer software and will run 
scripts and tests designed for earlier ver- 
sions. Sword said that Hammer G5 can 
emulate from 60 to 25,000 end points, 
with the blade version of Hammer G5 
offering even larger numbers. I 
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HP Focusing on Service Reliability 



BY DAVID WORTHINGTON 

When services go down, one 
might as well start torching dol- 
lar bills. Hewlett-Packard, which 
has begun a drive to revitalize its 
software business, is positioning 
its updated Business Service 
Management (BSM) product 
suite as a way to help mitigate 
the risk of service failures. 

The BSM suite went to mar- 
ket in late October. It includes 
upgrades to HP Business Avail- 
ability Center, HP Network 
Management Center, HP 
Operations Center and HP 
Universal Configuration Man- 
agement Database (CMDB). 

Business Availability Center 
7.0 offers new guided workflow 
capabilities that help isolate the 
area where a problem is occur- 
ring. It collects and correlates 
information about performance 
problems by monitoring busi- 
ness transactions through het- 
erogeneous environments. HP 
has extended support for Ora- 
cle Database, SAP and Siebel 
applications. 

The story began when HP 
acquired Bristol Technologies in 
February. It integrated technolo- 
gies from Bristol's TransactionVi- 
sion software to monitor com- 
plex transactions and extends the 
reach of HP's business service 
and application management 
software to the mainframe. 

HP has re-engineered Net- 
work Management Center in 
the 8.0 release with the aim of 
minimizing the impact of net- 
work device failures on busi- 
ness services. The company 
claims it finds problems in net- 
work paths that connect the 
elements of composite applica- 
tions; those capabilities come 
from Network Node Manager 
8.0, the first major overhaul to 
Node Manager in four years. 

It also implements IT Infra- 
structure Library (ITIL) 3, and 
includes a new console view 
that displays only network prob- 
lems requiring operator action. 

PICKING ONE'S BATTLES 

HP Operations Center 8.0 is 
designed to help IT staff under- 
stand how the combination of 
infrastructure issues and server 
problems affects business. It 
can prioritize fix time based on 
business impact, and integrates 
with Universal CMDB. 

Joe Fox, HP product market- 
ing manager, said that Opera- 
tions Center provides an end-to- 



end view from network device to 
business transaction and viser. 

Universal CMDB 7.0 pro- 
vides what Fox refers to as "a 
single version of truth,'' a repos- 
itory of information collected 



from the other three compo- 
nents. It is built out of Mer- 
cury's Universal CMDB prod- 
uct and includes new 
on-demand federation and rec- 
onciliation capabilities and can 



be populated and maintained 
by HP's Discovery and Depen- 
dency mapping solution. 

As a whole, the BSM suite 
monitors from infrastructure to 
end-user experience, across 



networks, servers and applica- 
tions. It may be used during pre- 
production and development; 
scripts can then be reused in 
production for monitoring appli- 
cations, Fox said. I 





data Dynamic* 



Active Reports 

for.ri£t 



Need the ability lo create serious reports 
for your company? 



Standard Edition 

$599 per developer; royalty free 

Professional Edition 

t! 499 per developer, royalty free 




' --■-!■■■-<& 



:> 



DATA 
DYNAMICS 



www.datadynam i c^.com 

5&70 Cleveland Avenue 
O-jlumbus. tibia 42131 

fax-G:4-&39-2g43 

visual Studio ml 



Active I?- 

report! on time, on butfgei and with your canity 

inUct. Sou couldn't ask for more. 



Compete integrator, with Vr S «Ja.l Sludb ,M€T makei :, a 
bo*, and iutaepflrt tonffDti prwid6 ^ ^ ^J* 

fcyrty-free deployment riimJn atM tMn costi fer _„ 
flE*d your <uftem B ri, y * u 

EndHisfr report darter mf]Mmi you fo jdfi 
jPQftM, d» ******** «g nert t ProtJZr 

iHTlo d2L™ "J '5f Wtb rep0rt ««'«W mal* it 






Everything developers need 
in one place 



NEWS 





Architecture Made Simple 

Different Standards - 

One Advanced Modeling Tool 



Jav_ 
DDUXML 



_ma/SOi 



Business Modeling 
Systems Modeling 
Domain Specific Modeling 
Code and Model Analysts 
Model Validation 
Reverse Engineering 
Code Generation 
Easy to Use and Learn 



Download your evaluation copy now 

www.magGafraMAom 

4 Nr> Magic. Inc, * ?3*M Ahna Drive, Suite 6U0 ■ Planr* TX 75035 » 

■MJUtLVjW il in*<HnilB«*"wL ill tin Vuti<- l>» 



JO . I1L11U . Software Development Times . November 15, 2007. 

Tomcat Purrs Without 



BY ALEX HANDY 

Tomcat has clearly marked off its turf in 
the corner of the Java alley. 

For companies deploying Java- 
backed Web applications, the Apache 
Software Foundation's Tomcat Web con- 
tainer is used by almost two-thirds of 
corporate Java developers, according to 
BZ Research, a division of BZ Media, 
which publishes SD Times. Those kinds 
of numbers imply that there should be a 
bustling community of open source ser- 
vice and support companies cropping up 
around the platform, but that's not the 
case. Even the nation's largest Apache 
service and support company, Covalent, 
sees this open source application server 
as a breeze to support. 

Tim Dean, a QA engineer and senior 
systems administrator with Mihtary.com, 
doesn't have an emergency phone con- 
tact for Tomcat. His company, a sub- 
sidiary of Monster.com, purchases sup- 
port contracts for much of its network 
and server equipment, but despite being 
in a production environment where 
everything runs on Tomcat, Dean doesn't 
feel like he needs a service-level agree- 
ment (SLA) for it. 

"We've always had good success with 
products from the Apache Foundation," 
said Dean. "The amount of open source 
support makes it really easy to maintain 
without support contracts. For the open 
source sys admin who prefers to do 
things themselves, it's really comforting." 

But that doesn't mean that Mark 
Brewer, CEO of Covalent, is unhappy. 
His company sells SLAs to enterprises 
running Apache software, and Tomcat 
coverage is currently the most popular 
of his company's service and support 
offerings. 

"It is our largest new customer base 
over the last three years; 60 percent 
have been Tomcat. We started support- 
ing it in 2001 when it was fairly imma- 
ture. Now we have full-time Tomcat 
engineers on staff," said Brewer. 

He admitted that supporting Tomcat 
is much less trouble than, for example, 
the Apache Web server. "It's easier to 
self-support for Tomcat than Apache. 
Apache people know it's been around 




Tomcat coverage is Covalent's most popul 
service offering, says Brewer. 



lar 



forever; the code changes a lot, but 
people don't upgrade that often. Tom- 
cat. ..because it's a Java application serv- 
er, the perception is at first it needs sup- 
port," said Brewer. 

Over the past three years, Tomcat 
service and support contracts have made 
up 60 percent of Covalent's new sub- 
scriptions, said Brewer. With numbers 
like that, it's hard to ignore the power 
developers have given themselves 
through Tomcat usage. 

Brewer explained that, as he sees it, 
Tomcat's success came about "largely 
because developers started out with 
Tomcat on their desktop." Because 
IBM's WebSphere and Red Hat's JBoss 
application servers both have Tomcat 
built in, much of the code developers 
tested out on Tomcat on their desktops 
could quickly be moved onto the pro- 
duction application server. 

SIMPLICITY A VIRTUE 

But as time has worn away the glimmer 
of the J2EE specification, that shortcut 
became a two-way street: Brewer said 
that many shops contracting with Cova- 
lent slowly learned that they didn't need 
any of the flashy bells and whistles avail- 
able in commercial products from BE A 
Systems, IBM and Red Hat. All they 
really needed was a Java 5-compliant 
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Web container with clustering. Thus, 
those applications that had been devel- 
oped on Tomcat and migrated to 
WebLogic, WebSphere or JBoss were 
suddenly coming back the other way. 

Since Tomcat 5.0, the software has 
supported clustering, and this has 
become the only real point oi confusion 
around the product, said Brewer. Tomcat 
clustering classes and Webinars have 
become some of his company's most pop- 
ular offerings. With clustering in the mix, 
said Brewer, companies such as Morgan 
Stanley have been able to move their 
entire Java application portfolios onto the 
platform, at tremendous cost savings. "In 
our customer population, at least 60 per- 
cent don't use EJBs [Enterprise Java- 
Beans]. They could just use Tomcat, so 
many of them are switching to Tomcat. 
It's like an untold secret BEA doesn't 
want anyone to know," said Brewer. 

Michael Goulde, senior analyst with 
Forrester Research, said that he's seen 
Tomcat uptake rise since 2005. But it's 
not just Web developers listening to 
Tomcat's meow; SOA developers are 
lending an ear as well. "Java EE servers 
are not the be all and end all of SOA 
today. There are a lot of other options," 



said Goulde. 

"Once it dawned on people they didn't 
need a full-blown J2EE container," he 
added, "Tomcat became the choice. 
Probably after the Apache Web server 
and MySQL, my guess is it's the third- 
most-used open source component.'' 

Raven Zachary, research director for 
open source at the 451 Group, said that 
Tomcat usage hasn't sparked the kind of 
service and support plans that keep 
JBoss and MySQL afloat. "You would 
have thought by now, with Tomcat being 
successful, some venture capitalist 
would have thrown money into a compa- 
ny to hire all the Tomcat developers," 
said Zachary. "Maybe it's just that easy to 
self-support. But if you can put a dollar 
amount loss to each minute you're 
down, you should probably have an SLA 
for support." 

Zachary pointed to the maturity of 
Java as a primary driver for Tomcat 
uptake. "I think EJBs have fallen out of 
fashion. A lot of the technology has 
come down to Java Standard Edition," 
said Zachary, "and Tomcat does for most 
people exactly what they need it to do. I 
think that's been, for a lot of people, 
good enough." I 



Apple Finally Ships 
Lonq-Awaited Leopard 



■* continued from page 1 

source code four times faster than pre- 
vious versions. The updated Interface 
Builder adds new behaviors that devel- 
opers can add to an application with a 
drag and drop, while Xcode's text editor 
contains enhancements designed to 
help developers write cleaner code 
from the start. Xcode also allows project 
snapshotting for brainstorming ideas 
that might not be ready for a source 
control system. 

At the same time, Apple's Wiley 
Hodges, senior product line manager 
for developer products, stressed that 
Xcode 3.0 respects the need for code 
management. "With the developer tools 
on Leopard, we now include Subver- 
sion," he explained, with the ability to 
create and manage Subversion reposi- 
tories. Subversion, CVS and Perforce 
are Apple's supported version control 
systems. 

Hodges continued, speaking of 
Xcode: "We've done a lot of work around 
the editor, to streamline the presenta- 
tion of information, put a lot of informa- 
tion about the code next to the code, to 
give it the kind of context that makes it 
really helpful. We've done a lot in terms 
of integrating the user interface design 
environment more tightly with the 
source code in the Xcode editor, as well 



as taking advantage of things like Core 
Animation." 

The new Dashcode widget editor 
provides simple tools and a library of 
JavaScript code snippets, GUI controls 
and templates, with the hope that even 
nondevelopers might be tempted to dive 
into the world of widget building. The 
code editor is optimized for JavaScript, 
and Dashcode's project manager and 
debugging tools may allow neophyte 
code slingers to feel like pros. 

In a manner similar to that of Apple's 
GarageBand music editor, the new 
DTrace-based Instruments debugger 
provides a timeline view of an applica- 
tion. It can inspect CPU and process 
behavior, monitor file, memory and net- 
work activity, and expose the processes 
of Mac OS X's OpenGL driver. The 
timeline view allows developers to visu- 
ally compare the behavior resulting from 
changes with the original code, exposing 
memory or performance problems. If 
the existing Instruments tools aren't 
quite right for a particular job, develop- 
ers can use Instrument Builder to create 
their own. 

"I think Instruments is going to pro- 
foundly change the way people do per- 
formance analysis and make them more 
willing to experiment and work to opti- 
mize their applications," said Hodges. I 
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Taking Model-Driven Development Mainstream 



-4 continued from page 1 

Visual Stvidio release 10 — all of 
these names being provisional. 

Burley Kawasaki, director of 
the connected systems division 
at Microsoft, explained that 
although composite applications 
and service-oriented architec- 
tures help breach boundaries 
across technologies by increasing 
agility and flexibility the broader 
problem, human productivity, is 
not being addressed. Microsoft, 
he said, will create application 
development techniques that 
address the limitations of current 
approaches and turn the model 
into the application. 

"Our vision is to make model- 
ing a mainstream part of applica- 
tion development. We will pro- 
vide the language, repository and 
tools to bridge disparate mod- 
els," Kawasaki said. He discussed 
what Microsoft views as the two 
fundamental limitations of cur- 
rent approaches to modeling: 
First, application models get out 
of sync with the application 
itself, as it changes down the life 
cycle; and second, users lack a 
unified view. 

"Everyone sees fragments, 
only the slice of the model that 
they think is important to them," 



Kawasaki explained. Microsoft 
System Center release 5 will pro- 
vide a repository for both busi- 
ness users and developers to col- 
laborate across rolls and view the 
same version of the model at the 
same time. 

When asked what role Share- 
Point might play, Kawasaki not- 
ed that it was an important part 
of the company's application 
platform and that Microsoft was 
determining usage scenarios. 

Models may be written in the 
developers language of choice, 
and are converted into the .NET 
intermediary language MSIL 
(Microsoft Intermediate Lan- 
guage) for interoperability, 
Kawasaki said. "[Developers] 
work with what they know." 
Microsoft will work with its 
Microsoft Business Process 
Alliance partners to integrate 
models and runtimes into Visual 
Studio. 

Kawasaki added that Oslo 
would be a strong inflection 
point for Microsoft — drawing a 
parallel with 1991, when it first 
released Visual Basic. Model- 
ing, he said, will permit busi- 
ness users to participate in the 
development process and help 
developers work more closely 



with them. 

The Visual Studio 10 user 
interface will also have facilities 
for users to assemble composite 
applications using drag-and- 
drop techniques, he said. "It's 
like a mashup but broader and 
more mainstream, and is easy 
for someone in business to 
understand." Microsoft has al- 
ready begun to use it internally 
for development. 

Gartner vice president and 
distinguished analyst Nicholas 
Gall remarked that Oslo is an 
ambitious attempt to get model- 
driven development right. "It's 
been tried many times before 
and come up far short," he said, 
citing the CASE modeling 
methodology and Object Man- 
agement Group's model-driven 
architecture effort as examples 
that, in his words, "fell short of 
expectations and enthusiasm." 

Gall described Microsoft's 
efforts as more than a push 
toward managed code; the goal 
is to create an interoperable and 
portable architecture. "[Micro- 
soft can map its] models to any 
kind of code such as Java or SAP 
code. Although as usual, I am 
sure that .NET and other 
Microsoft assets will get the first- 



class treatment; whereas other 
code environments will be done 
in a more opportunistic manner." 

Gall likened Microsoft's 
approach to modeling to its 
push for Web standards in the 
form of the WS-* family of 
specifications. "If WS-* were an 
attempt toward universal inter- 
operability, Oslo is an attempt 
toward universal portability. It 
completes the overall vision." 

He noted that Oslo's model- 
ing initiative would need indus- 
try support behind it in order to 
succeed over time. 

SPANS ACROSS PLATFORM 

Project Oslo will contribute 
updated messaging and work- 
flow technologies for the sixth 
release of BizTalk Server, the 
fifth having shipped in early 
October as Biz Talk Server 
2006 B2. Belease 6 will ship a 
new messaging infrastructure 
built on the Windows Commu- 
nication Foundation (WCF) 
Messaging API and will include 
the Windows Workflow Foun- 
dation (WF). Directions on 
Microsoft analyst Bob Helm 
said that BizTalk is the major 
vehicle for Oslo technology. 
Microsoft's Connected Sys- 



tems Division has developed 
technologies adapters for busi- 
ness applications as well as pub- 
lish-and-subscribe routing, a 
method to simplify how com- 
posite applications communi- 
cate over the Web. BizTalk Ser- 
vices offer a hosted version of 
WCF and WF, in addition to 
identity management. 

At present, Microsoft dis- 
tributes a toolkit for adapter 
technology, the Line of Business 
Adapter SDK, and beta releases 
of its own adapters in the 
BizTalk Adapter Pack. Adapters 
are available for mySAP EBP, 
Oracle Database and Siebel 
CBM business applications. 

The upcoming .NET release 
will enable model-driven devel- 
opment with WCW and WF. 
Another part of the Oslo initia- 
tive is an effort to align the meta- 
data repositories across the serv- 
er and tools product sets. 
Microsoft System Center release 
5 will be central to that effort. 

Microsoft will begin releasing 
betas of its application platform 
in 2008 but does not expect to 
have deliverables until 2009; 
Kawasaki said that it would 
decide when to release to manu- 
facturing based on feedback. I 



Sun Rising on Broader Appeal 



■* continued from page 1 

Valley campus, in the East Bay 
city of Newark. 

Jean Bozman, research vice 
president at IDC's enterprise 
server group, said that the com- 
pany began to make changes to 
its game plan even before 
Schwartz replaced company co- 
founder Scott McNealy as CEO. 

"They recognized they had to 
play to the broader market," said 
Bozman, who pointed to Sun's 
move into x86-based servers as 
exemplary of this realization. 
Those servers have helped keep 
Sun afloat, with sales steadily 
growing year over year. 

BROADENING SUN 

That move to embrace a wider 
audience has been one of the 
items on Schwartz's agenda. 
"He's had a lot of focus on 
alliances, partnerships, working 
with companies you would 
think were historically Sun's 
competitors, or even adver- 
saries in the marketplace," said 
Bozman. "There's the Sun/Intel 
announcement in January, and 



it's somewhat surprising that 
the IBM sales force would sell 
Solaris. Jonathan's been focused 
on broadening the appeal of the 
system, and continuing the 
marketing and momentum 
behind the x86 platform. I think 
it's been about reaching out to a 
broader set of customers to 
grow the top line, and to have a 
consistent series of profitable 
quarters." 

Profit is what Wall Street 
cares about. Baven Zachary, 
research director for open 
source at the 451 Group, said 
that Schwartz's recent decision 
to maximize his company's 
focus on the storage market 
could help to increase those 
profits. "The storage space 
seems to have more room for 
margin than servers. Servers 
are so insanely cheap these 
days, it's less of a hassle for a lot 
of companies to just buy more 
servers than you need," he said. 

Bozman pointed out that 
Sun has continued to refresh its 
midlevel and high-end SPABC- 
based server offerings, ensuring 



that the company's dedicated 
user base still has equipment to 
buy. But Zachary questioned 
how long Sun could hold out 
with its Solaris-focused systems. 
"Part of me wonders if Sun 
isn't just better off moving Solaris 
to the GPLv2, making it compat- 
ible with Linux and doing a mas- 
sive effort to take the best of 
Solaris and move it into Linux," 
said Zachary. "Maybe Sun should 
just embrace Linux wholeheart- 
edly. I'm not one to advocate the 
model of culture where you have 
a single operating system... but 
Linux is clearly here to stay. For 
now, [Sun] thinks it's better to 
replicate what Linux does well. It 
feels like this is a step toward the 
inevitable, which is Sun figuring 
out a way to bring Solaris and 
Linux together." 

SOLARIS AS UNDERDOG 

Ian Murdock, chief operating 
systems platform strategist at 
Sun, has different ideas about 
the direction Solaris should take. 
His team has already pushed out 
beta versions of a new installer 



and packaging system for 
Solaris, both of which take their 
cues from the Linux world. 
Murdock said that going for- 
ward, Sun would try to release a 
new version of OpenSolaris 
every six months, and that long- 
term support and binary com- 
patibility would remain the goal 
of regular Solaris. 

That sort of thinking is right 
in line with Sun's traditional 
business practice: Let the soft- 
ware sell the hardware. "Sun 
has leveraged software to get 
developer buy-in, and that cre- 
ates a favorable environment 
for their systems," said Boz- 
man. "They're not making as 
much money on Java as they 
might have with a different 
business model. But with Java, 
they've created a favorable 
environment for Sun." 

Zachary agreed, but worries 
about the monetization angle. 
"Open source isn't directly tied 
to hardware sales — it's goodwill. 
For Sun, as a public company, 
goodwill needs to ultimately 
translate into profits," he said. 




Sun has created favorable 
environments for its system, 
says IDC's Bozman. 

Halfway into 2008 (Sun 
closed its fiscal year 2007 on 
June 30), it appears that those 
profits are finally starting to 
accumulate. For 2007, Sun rang 
up just under $500 million in 
net income, whereas 2006 
showed $800 million in the 
wrong direction. 

Bozman seemed confident 
that Sun understands the barri- 
ers it must overcome. "Sun has 
looked to be in the middle of the 
enterprise world for a long time, 
and as an extension of that, 
they've had to go in some direc- 
tions they originally were not fol- 
lowing. They see where the mar- 
ket has broadened," he said. I 
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Gphone Rumors Hint at Broader Mobile Strategy 



< continued from page 1 

bid of US$4.6 billion for the whole kit 
and kaboodle will likely fall short of the 
final price for this chunk of the ether, 
Schmidts willingness to commit such a 
large amount of Google's money to wire- 
less spectrum shows just how much the 
company is banking on a mobile future. 

Why should any of this matter to a 
software developer? JavaScripts impor- 
tance to business is apparent, and 
Google's moves indicate a conformity to 
norms, not a move toward original stan- 
dards and wild new environments. Java 
developers would almost certainly rely 
on the successful Google Web Toolkit 
to translate their applications into 
JavaScript, and Microsoft-based devel- 
opers shouldn't have trouble adapting to 
an x86 environment. 

Perhaps Google's smartest move of all 
is giving developers an environment and 
programming language they already 
know. However, if the company's phone 
were to include this new JavaScript 
engine in an x86-based Gphone, it would 
wade into a marketplace already ripe 
with iPhone-compatible JavaScript appli- 
cations and oodles of x86-knowledgeable 
developers. Repeated attempts to reach 
a Google spokesperson for comment 
went unanswered. 

But sources inside Google corrobo- 
rate rumors of the combination of the 
company's large holdings of unused 
cross-U.S. fiber-optic networks. The 
company has not been talkative about its 
purchases of these networks, but various 
clues have cropped up that Google has 



been amassing long-haul network capa- 
bilities since the end of the first dot-com 
bubble. From the company's new data 
centers in remote regions of Oregon to 
its help-wanted ads seeking employees 
with experience in negotiating for dark 
fiber purchases, sources are simply con- 
firming information that has been trick- 
ling out slowly over the past five years. 

NETWORK FROM SCRATCH 

Those long-haul cables could form the 
basis of a Google mobile phone network. 
But the prospect of building a phone 
network from scratch makes some ana- 
lysts skeptical. Kanishka Agarwal, vice 
president of mobile media at Nielsen 
Mobile, analyzes mobile phone trends 
and service availability across geograph- 
ical markets. He said that if Google 
builds its own phone network, the 
biggest question is differentiation. 

Agarwal said that building a mobile 
network is a high capital expense. "What 
the consumer wants is seamless integra- 
tion across all kinds of networks, so they 
have continuous access to the service at 
the lowest price possible," Agarwal said. 
"What would Google have to offer to 
make something more compelling? Con- 
sumers can already get access to land- 
lines and cell lines. Is Google going to 
offer something that breaks that barrier 
and makes it seamless? Google has a 
great brand, but so do Verizon, Sprint, 
AT&T and T-Mobile." 

As for the actual Gphone, multiple 
sources inside of Google have confirmed 
that the company has a device, and that 



Sentilla Takes Wraps Off 
Pervasive Computing Platform 



BY P.J. CONNOLLY 

Computing may be everywhere one 
looks, but so-called "pervasive comput- 
ing" is just getting off the ground. Built 
on an ecosystem of cheap, yet robust, 
networked devices, pervasive, or ubiqui- 
tous, computing may power the next 
generation of applications, manipulating 
mobile and RFID technologies with cut- 
ting-edge developer tools. 

In mid-October, Sentilla, formerly 
Moteiv, announced the Sentilla Software 
Suite, a Java-based platform for develop- 
ing, deploying, integrating and managing 
pervasive computing applications. With 
support from IBM, Sun Microsystems 
and Texas Instruments, the company 
hopes to address the needs of a variety of 
industries, including agriculture, defense, 
entertainment and manufacturing. 

The suite, which is still in beta, is 
made up of the Eclipse-based Sentilla 
Work IDE and Sentilla Point. As the 
name suggests, Point is the combina- 



tion runtime supporting the end device, 
as well as the application framework, 
which allows multiple applications on a 
device. Point currently runs on so- 
called "motes" built with TI's MSP430 
processors. 

Going up the stack, Sentilla's soft- 
ware includes APIs that tie into IBM's 
offerings in the areas of middleware, 
SOA and Web services, allowing man- 
agement through commonly used tools. 
The development kit includes 10 Sentil- 
la "Tmotes" for use with sample applica- 
tions, or just to get one's feet wet with 
pervasive computing. 

The company plans to offer two SOA 
services, imaginatively named Integrate 
and Manage. Sentilla's Integrate allows 
the use of existing infrastructure in a 
pervasive application through a stan- 
dards-based approach. The Manage ser- 
vice enables the remote management of 
pervasive devices, again within the exist- 
ing infrastructure. I 



it is being shown around internally to 
increasingly larger audiences. 

A Google JavaScript engine could irk 
the Mozilla Foundation, which earns 
much of its revenue from die Google 
search tool embedded in its Firefox 
browser menu bar. But rumor of a Google 
browser has been circulating for longer 
than rumor of a Google phone, and nei- 
ther of them has yet surfaced outside of 
the company. And, indeed, Google does 
offer many JavaScript-intensive projects, 
such as the Google Web Toolkit, leaving 
potential for any JavaScript engine built 
by Google to be applied to one or more of 
these other projects. 

AD-SUPPORTED SERVICE MODEL 

Perhaps the largest and most nebulous 
portion of the Gphone plan is the ser- 
vice. One internal source indicated 
that Google hopes to build cellular ser- 
vice on the model of television: adver- 
tising-supported and free to any who 
own a receiver. Thus, in lieu of a 
monthly service charge, Google phones 
would offer up targeted, location- 
based advertising to users. A user could 
find his phone pointing him toward the 
nearest pizzeria when noon rolls 
around, provided the pizzeria has paid 
for the privilege. 



But this plan, too, makes Agarwal 
skeptical. "I would wager that there is a 
segment of this consumer world where, 
no matter where you walk, someone's 
talking to you about ads. I like to call this 
ad-supported, not ad-funded. There are 
always people who are so price-sensitive, 
they will always be in a [free, ad-sup- 
ported model]. There will be people 
who will pay premium dollars to not 
have to deal with that. On average, 
advertising would subsidize" but not 
fund the entire service, he argued. 

As for die Gphone itself, it remains 
unclear whether the device will appear at 
any time in die near" future. All of these 
rumors center on the company's showing 
of the actual device to its employees and 
select outsiders. With the needed 
700MHz spectrum not due for auction 
until this coming January, a Gphone being 
shown internally would seem to be fur- 
ther along in development than the net- 
work on which it may eventually reside. 

That could be the actual plan, howev- 
er, as Google has yet to actually dip its 
toe into the mobile device business. 
Were it to venture into this market, an 
initial foray into the space would do 
wonders to improve the company's per- 
spective on the potential problems of 
the business. I 
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A Host of New 
Tools Are Flowering 
At Microsoft 

Platform grows out to entice developers 




BY LARRY O'BRIEN 




My, how Microsoft's tools garden has grown! 
Not long ago, the only choice facing develop- 
ment teams was, "Which language do I use 
with Visual Studio?" Now, it can be daunting 
simply deciding among Visual Studio versions, never 
mind auxiliary tools such as Expression or Popfly 

The key to navigating Microsoft's tool chains is to 
remember always that the overarching goal of Microsoft's 
developer division is to increase the percentage of world- 
wide development being done for Microsoft platforms. 
Profit would be nice, but it is definitely a secondary con- 
cern. Microsoft has an imperative to provide tools for 
every land of programmer, from C developers targeting 
Windows Mobile to newcomers mashing up "hello" and 
"world." Making the problem of focus even harder, 
everyone has an opinion but no one truly knows how soft- 
ware development is going to evolve in the coming 
decade — with devices proliferating, the Internet becom- 
ing ever more accessible, and chips moving into the 
multicore era. The result of that uncertainty is a plethora 
of new programming languages and "Windows X Foun- 
dation" APIs whose ultimate success is not yet known. 

Some of the most exciting stuff coming out of 
Microsoft relates to beginner and nonprofessional pro- 
grammers. It may be tempting to ignore these prod- 
ucts, but that would be a mistake. Although few SD 
Times readers will be leading teams developing games 
for the XBox 360 (XNA) or writing path-finders for 
robots (Robotics Studio), many will be interacting with 
system administrators and power users. For their 
needs, tools such as PowerShell and Popfly may unlock 
greater value in the systems developed by your team. 

PowerShell is a command shell that is vastly more 
powerfvil than the "DOS box." Not only does it provide 
full access to the Common Language Runtime (CLR) 
of .NET, it has much more flexibility with variables than 
traditional batch files have. Because it is based on 
manipulating full-fledged objects rather than simple 
text strings, it has vastly greater capabilities for display 
and transformation of data. The stumbling block oi 
PowerShell is that its default naming scheme can be dif- 
ficult; the native equivalent of "dir" is "Get-Childltem," 
but the shell's alias facility can bring a more familiar feel 

Larry O'Brien, who writes the Windows fa- .NET Watch 
column for SD Times, is a technology consultant, analyst 
and writer. Read his bios at www.knowinp.net. 



to the system. Sadly, Microsoft has not rethought the 
interface to the command shell, and developing in Pow- 
erShell (absent a third-party editor such as Shell Tools' 
PowerShell Analyzer) is a matter of pressing the up and 
down arrows to recall previously typed lines, as well as 
the occasional use of Notepad. 

Popfly is Microsoft's tool for developing "mashups," 
highly componentized applications that mix and match 
data provided by Web sites and Web services. Popfly only 
recently entered public beta, and the value of the mashup 
approach for corporate development is still being 
debated. However, Popfly principal group program man- 
ager John Montgomery said, "Mashups on the intranet 
make a lot of sense: There are a lot of people who have tire 
need of combining data from multiple sources — customer 
databases, maps, inventory systems — who aren't develop- 
ers. There's a massive opportunity to do with intranet 
data what VB 1.0 did with databases." 

It may be valuable to think of mashups as being Web- 
based examples of the same "Pipes & Filters" architec- 
ture that is the core of PowerShell. In both cases, the pri- 
mary use case is a fairly linear transformation of data 
from "sources" to "sinks." 

Popfly development, performed within the browser 
(and Silverlight therein), is primarily a matter of using a 
drag-and-drop interface to connect inputs and outputs to 
components represented as blocks. The components 
themselves are written in JavaScript and rendered in the 
browser; Popfly uses Silverlight 1.0 right now, but 
Microsoft says it is "investigating adding Silverlight 1.1 
support in the future" (count on it). The Popfly experience 
additionally has social elements to it, such as the ability to 
share projects with friends and explore their work. 

THE DYNAMIC RANGE 

One way to characterize programming languages is by 
the amount of flexibility that modules (e.g., objects) 
have at runtime to modify the interpretation of fields or 
function calls. In languages such as C, for instance, if 
you have a library that works with Point objects that are 
two-dimensional, you don't expect to be able to use 
that library with three-dimensional points unless you 
go back to the library source code and change it; you 
wouldn't generally expect to be able to modify the 
Point type to have three dimensions, or use floating 
point instead of integers without recompilation. In 
dynamic languages, such "runtime type modification" 




Source: Scott Hanselman 
www.hanselmdn.com 



is commonplace. In languages such as Python and 
Ruby, you are free to call a library at runtime with 
whatever definition of Point you choose, and you're 
generally free to attach to the objects of the library (or 
any other object) new or modified functions that 
change the way it calculates. 

That definition does not explain why the past few years 
have seen an explosion of interest in dynamic languages. 
The rise in popularity has more to do with the increasing 
use of unit testing (which rapidly flushes out issues with 
dynamic runtime behavior), the success of several 
well-designed frameworks, such as Django for Python and 
Rails for Ruby, and, quite frankly, a restlessness in the pro- 
gramming community for The Next Big Thing. 

Microsoft's Iron" languages (IronPython, currently at 
1.1, and IronRuby currently in pre-alpha) are committed 
to be able to run diose frameworks eventually. "No one 
will take us seriously until [we can run Django and 
Rails]," said IronPython creator Jim Hugunin. (It should 
be noted that some successful frameworks, such as Zope, 
rely on libraries written in C and therefore may be sig- 
nificantly harder to bring to the CLR.) 

Microsoft's Dynamic Language Runtime (DLR) is 
an extension to the CLR that facilitates the implemen- 
tation of dynamic languages. The next full releases of 
Microsoft's Iron* languages will rely on the DLR. So, 
too, will the post-VS 2008 version of Visual Basic (VBx) 
and future versions of JScript, Microsoft's derivative of 
ECMAScript Edition 3 (ECMAScript is the official 

continued on page 44 ► 
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name of the language generally 
known as JavaScript). 

The most used dynamic lan- 
guage, by uncountable magni- 
tudes, is JavaScript. We all know 



by now that JavaScript can 
request data, often formatted in 
XML, from a browser "behind 
the scenes" in reaction to the 
user's typing or mousing; Asyn- 
chronous JavaScript and XML 



(AJAX) is at the heart of the 
richer browser-based interfaces 
that are associated with "Web 
2.0." Those who've tried to cre- 
ate such slick interfaces also 
know that a lot of ugly and com- 



plex work goes into making 
DHTML and images look like 
the widgets of an interactive UI. 
Wouldn't it be nice if there were 
a sophisticated presentation lan- 
guage that ran in browsers and 
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could be powered by JavaScript? 
This, it should come as no flash, 
is the goal of the aforemen- 
tioned and recently released 
Microsoft Silverlight 1.0, which 
combines JavaScript with 
XAML, the markup language of 
Windows Presentation Founda- 
tion (WPF). 

Although WPF provides for 
sophisticated UIs, the JavaScript 
standard library is still quite lean 
when it comes to, let's say, col- 
lection classes. The CLR, on the 
other hand, has extensive collec- 
tion classes, as well as a runtime 
environment that's very sophisti- 
cated when it comes to tilings 
like memory management and 
exception handling. 

On the other hand, the CLR 
has grown up on top of Windows 
and with various dependencies 
that would need to be slimmed 
down and refactored, were it to 
run in the context of a browser. 
Such a Core CLR (Microsoft is 
somewhat leery of that term, but 
it's apt) plus the Dynamic Lan- 
guage Runtime plus WPF con- 
stitutes Silverlight 1.1, currently 
in alpha. As you might surmise, 
the number of moving parts in 
Silverlight 1.1 makes the "point 
release" designation somewhat 
questionable. 

VISUAL STUDIO 

Once out of the realm of Pow- 
erShell and Popfly, a product 
you may have heard of called 
Visual Studio facilitates devel- 
opment. (It's surprisingly un- 
common knowledge that one 
can freely download command- 
line compilers for all Microsoft 
languages and never use Visual 
Studio.) In recent years, Visual 
Studio has become available in 
a number of specialized ver- 
sions. The version most likely 
to be familiar to SD Times 
readers is Visual Studio Profes- 
sional Edition, which is often 
subscribed to in conjunction 
with MSDN Professional. 

Space constraints prevent 
me from discussing the less- 
capable Standard and Express 
Editions, except to say that 
they're built on the same core 
environment, use the same 
compilers as the Professional 
Edition, and if you have to trade 
off capability versus cash flow, 
they may well prove attractive. 

Visual Studio 2008 will be offi- 
cially launched at the end of Feb- 
ruary but is expected to ship by 
year's end. The pro edition fea- 
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tures C# 3.0 and Visual Basic 9 
(no longer branded as VB.NET), 
each with Language Integrated 
Query, or LINQ (see "LINQ 
Clicks," page 51). 

In addition to LINQ, a dra- 
matic change in VB 9 is its unique 
approach to XML, with its sup- 
port for XML literals and proper- 
ties that allows XML to be used 
directly widiiri source code. The 
C++ language has not changed as 
dramatically, although future ver- 
sions of Managed C++ will likely 
include LINQ. 

Despite being officially 
released, IronPython 1.1 is not 
included in Visual Studio 2008, 
nor is F#, a Microsoft derivative 
of OCaml that has recently been 
promoted to official product sta- 
tus. F# is not a dynamic lan- 
guage, nor is it reliant on the 
DLB. The promotion of F# is 
somewhat surprising and speaks 
to Microsoft's emerging empha- 
sis on functional programming 
techniques as a strategy for deal- 
ing with a future of increasingly 
concurrent hardware. 

Even more than the language 
features, which are after all 
optional, what is striking about 
VS 2008 is the increased variety 
available in "New Projects" and 
"Add New Items." In addition to 
Windows and Web projects, one 
can choose Database, Silverlight, 
Test, Windows Communication 
Foundation and Workflow pro- 
jects. Add Visual Studio Tools for 
Office, Smart Devices (phones 
and PDAs), Setup and Deploy- 
ment, and Extensibility Solu- 
tions, and subtypes within each 
category (Windows Forms or 
WPF? ASP.NET Server Control 
or ASP.NET AJAX Server Con- 
trol? Sequential Workflow Ser- 
vice Library or State Machine 
Workflow Service Library?), and 
one can despair of ever again 
understanding what it means to 
"develop for Windows." 

Until recently, every version 
of Visual Studio has rotated 
around the core task of con- 
structing code, but in an attempt 
to address the concerns of large- 
team development and applica- 
tion life cycle management 
(ALM), 2005 brought the release 
of Visual Studio Team System 
(VSTS), which combines a server 
component with a number of 
role-based specializations of 
Visual Studio. For teams unful- 
filled by the capabilities of Visual 
Studio Professional, particularly 
distributed teams or teams with- 



out an existing infrastructure of 
ALM tools, VSTS provides "one- 
stop shopping" for version con- 
trol, defect and work-item track- 
ing, and continuous integration. 
Visual Studio Team Founda- 



tion Server is the collaboration 
server for VSTS and provides 
the core capabilities for storing 
and sharing information. The 
key piece of such information is, 
of course, source code, and 



Team Foundation Version Con- 
trol is a version-control system 
that is significantly more capa- 
ble than Microsoft SourceSafe. 
VSTS' emphasis on distributed 
teams (even if that simply 
means working from home) is 
evident in its unique "shelf fea- 
ture, which allows code to be 
shared between computers 



before it's checked in to the offi- 
cial tree. This can be especially 
valuable because, as widi all 
commercial ALM tools, VSTS is 
most appealing to teams with 
more formal software process 
rules, and VSTS can ensure that 
checking in code to the main 
development trunk involves a 
continued on page 46 ► 
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gamut of integration tests and reviews. 

Not surprisingly, Foundation Server's 
greatest strengths are its integration with 
other Microsoft technologies: A team por- 
tal using Windows SharePoint, metrics 
and business intelligence based on SQL 
Server and Excel, and, perhaps especially, 
work-item tracking via Exchange and 
Outlook are all selling points. 

The role-based versions of Visual 
Studio that coordinate with VSTS are 
labeled Team Editions and target devel- 
opers, testers, architects and database 
professionals. Those whose roles don't 
fall into such categories have the option 
of buying the whole kit and caboodle in 
the form of Team Suite. 

The Team Edition for Developers is 
the closest to the baseline Professional 
edition, adding profilers and unit-testing 
tools. The Tester edition adds more types 
of testing (Web and load) and provides a 
Test Manager for controlling large num- 
bers of tests. The Architect edition of 
VSTS includes a number of visual design 
surfaces for specifying application struc- 
ture and deployment. Finally, the newest 
member of the Visual Studio family is the 
Database version, which is not a tradi- 
tional DBA tool but rather facilitates 
development-centric tasks, such as refac- 
toring names, synchronizing schemas 
and generating test data. 

IN WINDOWS, FOR WINDOWS 

From PowerShell to Visual Studio Team 
System, Microsoft wants people to be 
programming in and for Microsoft tech- 
nologies, whether those technologies are 
Windows and Windows Vista desktops, 
Windows Mobile smartphones, Office or 
Internet Explorer. Microsoft long ago 



decided to compete for market share in 
every level of the development tool mar- 
ketplace. The core around which the 
majority of their tools are built is Visual 
Studio, and the sheer count of Visual 
Studio SKUs can be daunting. However, 
for the majority of SD Times readers, 
the decision probably boils down to 
Visual Studio Professional versus Visual 
Studio Team System. 

In addition, professional develop- 
ment teams will need to decide on an 
interface technology: the traditional pix- 
el-based world of GDI and GDI+; the 
complex but independent world of 
DHTML; or Microsoft's preference, the 
media-sawy world of Windows Presen- 
tation Foundation. Microsoft cannot 
afford to abandon any of those technolo- 
gies; there are incontestably legitimate 
reasons to make each choice. 

We're in a wonderfully fertile time of 
change when it comes to programming 
languages. The software development 
community has realized that the discussion 
of mental models for aiding problem-solv- 
ing does not end with the words "object 
orientation" and that a language doesn't 
have to use curly braces to be professional. 
While there would definitely be risk choos- 
ing a language such as F# or Ruby for core 
work, the Visual Studio 2008 releases of 
Visual Basic and C# have very powerful 
new capabilities that are undoubtedly 
worth incorporating into systems. 

Finally, PowerShell and Popfly 
embody an architecture that has great 
potential for supplementing professional 
development and delivering additional 
value to the end user. And if some of 
those power users start to become more 
ambitious, all the better for the software 
development community. I 



MICROSOFT REFRAIN: LET'S GET VISUAL 



Visual designers have been a part of Microsoft IDEs since the original Visual Basic, 
so it should come as no surprise that within Visual Studio 2008 is a visual design- 
er for Windows Presentation Foundation (WPF). This designer, known as "Cider" 
during its development, is capable enough for creating the types of form-centric Uls 
that have long been the bread and butter of visual designers. 

However, the capabilities of WPF go well beyond such standard widgets. WPF 
deserves the "foundation" moniker and provides facilities for rich media, vector 
graphics, animation and text presentation that go much further than what's been 
previously available in the managed world. All of these things can, of course, be 
specified in a program by creating the appropriate objects, setting their fields, and 
calling methods on them. But more commonly, WPF Uls will be specified using the 
declarative XAML language, and Microsoft would like to promote a world in which 
professional graphics designers turn to WPF as naturally as they now turn to Adobe 
Photoshop or Illustrator, and more naturally than they turn to Adobe Flex. 

Microsoft's Expression product line is intended for graphics professionals. Expres- 
sion Studio is the graphic professional's eguivalent to Visual Studio and incorporates 
Expression's Web, Blend, Design and Media products. The ideal life cycle for a graphi- 
cally rich WPF Ul might be something prototyped by a programmer in "Cider," and then 
as the programmer works on the application source code, the XAML Ul description is 
taken by a designer and "styled up" in Expression Studio. When that "high gloss" Ul is 
checked out of version control, it should link up with the programmer's work without 
fuss. The resulting program might be deployed as either a native application on the 
desktop or as a Silverlight application within the browser. — Larry O'Brien 
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FROM THE EDITORS 

Sun Finally Makes Strides 

With Jonathan Schwartz in the driver's seat, Sun Microsystems has 
grown and matured. Under Scott McNealy, the company was a 
loosely coupled grouping of gigantic brains and little-to-no concept of 
the consumer marketplace. Under Schwartz, it is a much more internal- 
ly communicative and coordinated bunch of dedicated engineers. 

Today, internal wikis and blogs track the developments taking place 
inside this increasingly transparent company. With its CEO busting par- 
adigms (see Schwartz's blog-based exchange with SEC chairman 
Christopher Cox) through open discussion, and a host of "finally" deci- 
sions in its product lines, Sun certainly seems to have come to terms with 
its many long-standing problems. 

Sadly, Sun's biggest move of late, the shift to an open source Java SE, 
hasn't exactly been a galloping success. While the community around the 
newly open sourced Java has been contributing and helping to bring the 
language up to snuff, Sun's relatively ham-fisted approach to the forma- 
tion of the governance committee for the language hasn't exactly been a 
high-profile, fast workgroup. 

Certainly the members of the governance board are worthy candi- 
dates for shepherding Java into the future. But with the formation of this 
group six months behind us, it is unnerving that the board has met face- 
to-face only once. Blog entries describing this meeting tell of humorous 
chats over beer and large discussions of Solaris and OpenSolaris. But 
when it comes to the actual work that needs to be done in order to form 
a user-elected governance committee and constitution around Java, this 
board seems to have made little progress. 

The external efforts around the OpenJDK seem to be just about 
stalled. The OpenJDK is still encumbered with intellectual property 
issues, and the developers in the open source community tasked with 
building font rasterizers and cryptography libraries from scratch haven't 
yet built anything that can be used in a production environment. Good 
software takes time, especially when some of it is being written by devel- 
opers doing the work for free. Still, we wish for more progress. 

The delays in getting Java into a truly open source form may be indica- 
tive of a larger problem: Sun may be expecting more from its open 
source communities than is reasonable. Getting independent-minded 
developers to embrace a governance process isn't easy — that's why the 
JCP is populated with so many corporate-backed sponsors. But easy or 
not, Sun needs to nudge the Java Interim Governance Board into a 
proactive role. Otherwise, Sun's recent momentum will suffer. 



Microsoft Should Listen 

There is wisdom in consensus, and if you listen hard enough, you can find 
it. Microsoft's decision to share the .NET Framework library source 
code is good for customers and potentially very good for Microsoft — but 
only if the company taps the wisdom of its development community. 

The legal intricacies of what happens when Bedmond receives user- 
submitted code as feedback would have to be sorted out should 
Microsoft decide to use it. It is likely that at some point, a developer will 
say, "There is the problem in your code and here is the version that will 
obviate that problem." The question is, of course: Who owns that code, 
and would Microsoft get in trouble simply by reading it? 

Once upon a time, it was a common practice for platform licenses to 
require participatory users to assign their creations within the system to 
the platform owner. Microsoft could easily draft a further license that 
allows developers to suggest patches while preserving its IP rights. 

For example, Microsoft has a comprehensive issue tracking system in 
place. Its patterns and practices group is experienced at receiving feed- 
back about reference code. It would not be hard to tweak that system to 
allow developer feedback on these Shared Source libraries without 
imperiling anyone's IP right — and that's what Microsoft should do. I 



LETTERS TO THE EDITOR 

Rapid Application Decline? 



This article ["Rapid Application 
Decline?" Oct. 15, page 1] is complete 
nonsense, as the analysts promoting the 
obsolescence of RAD have no idea what 
they are talking about. 

RAD is a process to allow technicians 
and technical managers to define the 
shortest possible development schedule 
that can produce quality and satisfying 
results to the end users. 

The idea that RAD was defined 
around tools was an initial concept based 
upon the developing Microsoft Visual 
Basic environment. However, since 
then, RAD has matured rapidly to 
become a scientifically based process 
that incorporates many subprocesses to 
efficiently define, develop and imple- 
ment software projects. 

To say that RAD is obsolete is the 
same thing as saying quality software 
development is obsolete. However, by 
the way many projects are still imple- 
mented today, one could conclude that 
software quality never really existed. 

Steve Naidamast 

Black Falcon Software 

Editor's note: Steve Naidamast is the 
founder of Black Falcon Software, which 
sells developer tools and components for 
rapid application development. 

NO SIMPLE DEVELOPMENT 

I have been in this business for 30+ 
years and seen all the next "new cure to 
the woes of development" come and go. 
For David Rubinstein to say that there is 
such a thing as "Simply Application 
Development" ["RAD Isn't 'Rad'? How 
SAD," Oct. 15, page 50] continues to 
perpetuate the same thought pattern 
that shortcuts can be taken to produce a 
solid business-level application. 

I remember the days when a Visual 
Basic programmer would say, "That appli- 
cation that your mainframers are saying 
will take one year to develop, I can do in 
30 days." 

And you know what? The VB pro- 
grammer did and then walked away, and 
60 days later issues of security, scalability 
and enhancement came to bite the client 
in the behind. The basic problem (no pun 
intended) was that die VB programmer 
gave little thought and time to all the 
issues outside programming. Program- 
ming at most is 20 percent of the total 
effort of application development. 

The System Development Life Cycle 
still requires analysis, design, develop- 
ment, testing, implementation and sup- 
port at the "simple level." At the complex 
level, it also includes solid process and 
data analysis and design, creating test 
plans for unit, system and acceptance 
testing at all three levels, security, records 
management, etc. This process can be 
facilitated with iterative processes, proto- 
types, and tools with components and 



GUI drag-and-drop, but if you ignore any 
of the other issues, you will still get bit. 
Randall Cecrle, FLMI 

IT Manager/Oracle DBA 
Nebraska Workers' 
Compensation Court 

GLUE WON'T STICK 

I enjoyed David Bubinstein's Industry 
Watch column ["ALM s More Than Tools," 
Oct. 1, page 50] but would like to point out 
that ALM 2.0 is also more than just glue. 

You wonder why the glue hasn't 
seemed to stick, and why a new tube 
might be needed. Lots of people have 
struggled with the glue concept since the 
problem of tool interoperability has been 
with us for so long. It gives rise to tilings 
like the Application Lifecycle Framework, 
a fanciful but ultimately hopeless attempt 
to get tools to speak the same language. 

Its not glue that's needed; it's a single 
data model that supports configuration 
item integrity, reuse and process enforce- 
ment. And that includes non-code config- 
uration items, like requirements and test 
plans and documentation, which are just 
as important when it comes to data 
integrity, reuse and availability to all the 
participants in the life cycle. But single 
data models would require the rearclii- 
tecting of all those acquired tools, and that 
is just not in the cards financially. 

Part of the problem is thinking that it's 
only a matter of code and process. And 
part of it is the mistake in thinking that 
getting tools from a single vendor was the 
same as buying a single platform. 

What does gluing tools together not 
give you? It doesn't give you access to all 
configuration items by all participants; it 
doesn't give you a consistent way to man- 
age change to all configuration items (and 
that includes more than code — it means 
all configuration items from requirement 
to test scripts to documentation). It doesn't 
get you a single way to manage role- 
based permissions, security or process 
enforcement, and it doesn't get die port- 
folio management capabilities because 
the CI repositories are just too different. 

Bational Software articulated a vision 
for integrated ALM in the mid-1990s. The 
reason that they never got there, dozens of 
acquisitions later (including their own), is 
simply that they tried to get diere using 
dozens of acquisitions. And unless you are 
prepared to throw away all the products 
that you buy in the process, a stick of glue 
is not going to solve the problem. 

Phil Deck 

Editor's note: Phil Deck is CEO of 
MKS, which makes application life cycle 
management tools. 

Letters to SD Times should include the writer's name, 
company affiliation and contact information. Letters 
become the property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 
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Riding the Rails of SOA Quality 



In a recent meeting I attended, some- 
one asked, "Who owns the overall 
quality of a SOA in an enterprise?" My 
initial response was, "No one does," 
which immediately drew blank stares. 

What I meant is that no one person is 
solely responsible for defining or gov- 
erning quality in a service-oriented 
architecture. The word "quality" is a 
noun that describes a charac- 
teristic of a system or a degree 
of excellence. From a gram- 
matical standpoint, it is similar 
to the word height. If we talk 
about a 5-foot-tall person ver- 
sus a 6-foot-tall person, we can 
immediately picture a differ- 
ence in height. The concept oi 
quality, however, is not so 
black and white. 

After all, a quality experi- 
ence for one person may not be the 
same for the next. From an enterprise 
standpoint, the quality of a system or a 
SOA cannot easily be measured in inch- 
es or centimeters. If a SOA does not per- 
form as desired when new services are 
added, is this due to poor quality of the 
SOA or the individual service? 

After my meeting, I continued think- 
ing about this concept while riding back to 
the office on the Acela Express, Amtraks 
high-speed train. We were whisking along 
at what appeared to be more than 100 
mph. As I sat looking out the window, I 
was startled by another train that blasted 
past us in the opposite direction. We were 
collectively moving so fast that I couldn't 
see passengers on the other train, yet we 
were only a few feet apart. 

At that moment I was very glad that 
quality and governance were working 
together. 

FOLLOWING THIS TRAIN OF THOUGHT 

Relating the different elements of my train 
ride to different components oi a SOA, the 
concept of quality and governance work- 
ing together became much clearer. The 
train itself is like a service: Quality is mea- 
sured by how smooth the ride is, the speed 
at which it travels, and the fact that the 
windows don't pop out from the forced air 
pressure as we pass other trains. All of 
these factors are the domain of the quality 
engineers who manufactured the train and 
those who maintain it. 

The fact that we departed and arrived 
on time certainly could affect my per- 
ception of a quality experience, but is 
more akin to an application built on 
those services, not necessarily the train 
itself. The fact that we didn't collide with 
the train coming the other way was 
determined by a governance rule that 
comes from a higher overall train author- 
ity. The higher train authority is not nec- 
essarily concerned with how Amtrak 
treats its customers or how fast, slow or 
bumpy the ride is, so long as the train fits 




within its governance rules of height, 
width and stability to ensure safety. 

From Amtrak's perspective, quality 
boils down to creating a positive customer 
experience that prompts people to return 
in the future. 

In this case, however, who owns overall 
quality? Again, no one does. 

Quality is determined by the collective 
effort of the train company, 
the train system and the high- 
er train authority. In addition, 
the business culture of each 
entity ultimately determines 
what quality is and how 
employees should deliver 
desired results. 

Companies are very simi- 
lar. Some push for the utmost 
experience and strive for ulti- 
mate perfection in their 
goods and services, while others are more 
relaxed and accept the fact that "good 
enough" can be sufficient to still achieve 
business objectives and keep costs down, 
while satisfying customer needs. For 
example, I am willing to wait for a few 
more validations when making a bank 
transfer than I am when shopping online. 
I am more understanding if a book 
arrives in the mail a day later than 
promised than if money is missing from 
my bank account. 

So how does quality factor into a SOA 
where independent services and compos- 
ite applications, often created by different 
groups, interact directly with one another? 
Each piece of a SOA must have the 
infrastructure in place to ensure that it 
meets and continues to meet the desired 
level of quality. Like the train and the 
railway, much of this infrastructure 
already exists, and the software develop- 
ment industry is well versed at testing at 
the service level within the software 
development life cycle. We also under- 
stand the value of testing standard appli- 
cations on top of services — to ensure the 



train arrives on time. 

From a SOA perspective, we need to 
document policies in a standard way and 
verify whether governance rules are being 
followed, or whether performance issues 
will occur if one more service is added to 
the mix. We also need new ways of testing 
interactions between services coming 
from different departments or business 
units of a company. How do these groups 
communicate when they are using differ- 
ent languages, platforms and definitions of 
quality? A testing system that is agnostic to 
these differences and facilitates collabora- 
tion is very important as a SOA grows. 

GREATER AGILITY 

The biggest hope from most SOA initia- 
tives is to gain a greater agility to easily 
adjust to market dynamics. But agility 
means that pieces of a SOA have to 
change, making SOA quality a critical 
requirement when building and deploy- 
ing interacting components that are con- 
stantly coming and going, changing and 
evolving, and to a greater or lesser extent 
interacting. How do we know that the 
system will run at the same level of qual- 
ity today as it did yesterday — or even 
more important, predict that it will run 
the same tomorrow as it does today? 

For this to happen, testing and vali- 
dation tools need to work in conjunction 
with governance systems. This will 
ensure that prior to governance accept- 
ing a change to the system, it will auto- 
matically rerun the appropriate tests and 
validation checks to ensure that quality 
expectations are being met. 

So while no one person or entity owns 
the overall quality of a SOA, it is important 
to put the right infrastructure in place to 
allow teams to define and maintain the 
level of quality that the culture of tire com- 
pany demands, and ensure the level of 
quality that services and composite appli- 
cations need in order to keep the train 
moving forward smoothly and efficiently. I 

Frank Grossman is co-founder, president 
and CTO ofMindreef, which sells test and 
quality assurance software for SOAs. 



JUnit Is Commonly 
Used in Enterprises 

On the 10th anniversary of the JUnit open 
source Java unit testing framework, an Evans 
Data survey found that it has made its way into 
the toolboxes of most Java developers. Three 
out of four survey respondents are using the 
JUnit framework, and are more likely to do so 
in enterprises with greater than 1,000 employ- 
ees. However, only 19 percent indicated that 
they were using tools to automate JUnit 
processes. The survey also found that JUnit is 
more popular in North America than elsewhere, 
and least likely to be used in the European, 
Middle Eastern and African countries. Test 
automation tool maker Agitar Software com- 
missioned the survey. 
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The forthcoming releases of Micro- 
soft's major .NET languages, C# 
and Visual Basic, support Language 
Integrated Query (LINQ), an impor- 
tant innovation that is garnering essen- 
tially unqualified raves and already 
being extended in fascinating new 
ways. 

It's been a long while since I've dis- 
cussed LINQ in this column and, as the 
facility is on the verge of widespread 
release, it's well worth revisiting. 

LINQ is a language feature that 
allows relational operators to be 
applied to objects. The obvious use for 
this is to replace embedded SQL, 
which is enabled by "LINQ to SQL" 
(often called DLinq). The advantage of 
native-language data manipulation is 
probably obvious, but just to spell out 
the biggest wins, the manual mapping 
of table names, column names and 
SQL types to runtime classes, fields 
and CLR types has always been 
extremely tedious and error-prone, and 
it's an uncommon application that 
maintains its plain-text SQL queries in 
an easily evolvable store uncoupled 
from application code. 

The "magic" of Dlinq requires an 
explicit mapping, a subtype of Data- 
Context, between the SQL and object 



LINQ Clicks 



world views. Generally, this mapping 
can be created by dropping a SQL 
model onto a design surface and click- 
ing "OK" a few times. Customization is 
very easy, though — something that 
I appreciated after having some ex- 
perience trying to apply Ruby's 
ActiveRecord library to a legacy data- 
base. It should be said that 
there are many complexities 
to object-relational map- 
ping, and I will be shocked 
if the next year does not 
bring at least one high-vol- 
ume complaint about the 
characteristics of the default 
mapping. 

Once you have a Data- 
Context subtype, you can 
begin querying the data. 
Although the syntax of LINQ is deter- 
mined by the language designer, not 
the runtime, in the case of both C# and 
VB you'll see keywords such as select, 
from and where that will be familiar 
to any SQL user. 

Just the presence of strongly typed 
entity classes would be nice enough 
(hello, IntelliSense!), but LINQ addi- 
tionally supports all the common oper- 
ators of the relational algebra. This 
means that, just as a SQL query can 




result in a table with columns that are 
mixed and matched from the source 
table, so too can you create objects that 
are mixed and matched from their 
sources! 

The implications of that are fairly 
extensive and lead to concepts such as 
anonymous types and closures that may 
be unfamiliar to some but 
which are pretty easy to 
understand in their worka- 
day usage. Don't be dis- 
mayed by the sudden explo- 
sion in Internet material on 
functional programming and 
I extension methods; as inter- 
^fy I esting as that speculation is, 
it's not part of the core 
learning process. 

LINQ is not an attempt to 
unified data model across 
it's an attempt to create a uni- 
fied query/manipulation facility across 
realms. This goal seems well on the way 
to being achieved within the database 
realm. This seems less true of LINQ to 
XML (XLinq). In contrast to DLinq, 
XLinq 1.0 does not revolve around a 
strongly typed mapping between the 
object world and that of XML; a tool for 
such mapping, called LINQ to XSD, is 
in development but will not be part 



create 
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of the initial release. (You can find 
out more about LINQ to XSD at 
blogs .msdn.com/xmlteam/default.aspx. ) 

When you work with XML, you 
have more of the "anything goes" expe- 
rience that is nice with small applica- 
tions and not so nice when dealing with 
a large volume of code. For me, this 
was especially frustrating, as I have 
been facing challenges integrating 
a system involving several complex 
relational databases and XML sources. 
While LINQ still looks like it may be 
the tool to cut this Gordian Knot, 
working my way through the 214 
files in the schemas directory would 
be nice. 

Two additional fascinating LINQ 
technologies are extensions to auto- 
matically parallelize LINQ (PLinq) 
and the use of LINQ and reflection 
APIs (see tinyurl.com/225pd2). Fur- 
thermore, the Dynamic Language 
Runtime gang at Microsoft (those 
working on the Iron* languages) point 
to deep equivalences between LINQ 
expressions and what they are using to 
generate code at runtime. 

But "just" the 1.0 release of LINQ is 
absolutely something that every CLR 
developer ought to become familiar 
with. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog 
at www.knowing.net. 
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Reference Models and Architectures 



Those who implement SOA have 
become a bit confused about the 
notions of SOA reference models and 
SOA reference architectures. Moreover, 
there is confusion about how they work 
with the more traditional concept of 
enterprise architecture, including all of 
the management and development dis- 
ciplines behind EA. 

So, if you're confused, you're not 
alone. There are many definitions for the 
concepts of SOA reference models and 
SOA reference architectures that are now 
being defined by guys like me, standards 
organizations such as OASIS and the 
Open Group, and vendors such as IBM, 
Oracle, BEA and TIBCO. Sometimes 
they align; most of the time they do not. 

This explosion of definitions came 
about because as SOA gained traction as 
a core architectural pattern, those tasked 
with building SOA began to look for new 
reference architectures, reference mod- 
els or anything to provide guidance. The 
standards organizations and vendors 
quickly came up with a few answers. Also, 
the SOA vendors, not to be outdone, 
have come up with their own frame- 
works, models and architectures, typical- 
ly around their own stuff, of course. 

So, who's right? I'm not sure this is a 
matter of right and wrong, but perhaps, as 



I've been suggesting, it's time we come up 
with some common definitions and 
shared vision. I do think we are moving in 
that direction, albeit slowly, and that just 
agreeing on semantics will be a huge 
accomplishment in this emerging space. 
However, I will go a few steps further and 
state that you may not even need refer- 
ence models and architecture 
if your approach is sound and 
your understanding of the pat- 
terns of SOA is complete. 

At this juncture, we should 
stop comparing and contrast- 
ing the different ways that 
organizations and individuals 
look at SOA. That's never a 
good way to spend your time. 
However, you need to under- 
stand SOA in the context of 
your enterprise, and then you can create 
any model as long as it works — this is 
called architecture. 

It's actually very simple. You begin 
with the notion of information models as 
they exist within your problem domain or 
enterprise, and define them to the level 
of detail where you have a complete 
understanding of the information, 
semantics, structure, policies and other 
attributes that allow you to define the 
information model. It's not that hard; 




we've been doing tills for years. 

Next, you define the abstract model, or 
how you want to view the information in 
the context of the SOA. This means taking 
the physical representations and struc- 
tures, and turning them into an informa- 
tion layer diat makes better logical sense 
within the SOA. This approach and its 
enabling technology have 
clear advantages when consid- 
ering agility, since your visible 
structures for use within the 
services are configurable. 

Then, you define your ser- 
vices, or behaviors, and how 
the underlying information 
models we just created are 
bound to those services. Typi- 
cally, you create two types of 
services — data and transac- 
tional — but you can easily expand out, 
depending upon the problems to be 
solved. Services can be bound into 
processes and composites, but that's next. 
Finally, you define how all of the ser- 
vices below exist within a process or 
orchestration model, or a place where 
business processes are defined and rede- 
fined, thus providing the core benefit of 
SOA — agility. The core idea here is to 
place volatility into a single domain, or a 
place where the use of services (and thus 



the information) can be defined, and rede- 
fined, according to the requirements of 
the business. Also, consider a monitoring 
and event management layer diat exists 
above the business processes to keep an 
eye on the architecture during operations. 

You also need to consider a governance 
model and a security model, and have the 
ability to create and enforce policies 
around the use of the services. In addition, 
you need die ability to bind security down 
to core granular components, typically 
dirough a federated security model. 

Now, was that so hard? We did not 
even look at a SOA reference model or 
architecture for comparison or reference, 
and we were able to produce an approach 
to creating your SOA. Of course, adjust as 
needed for your situation; that's the great 
thing about creating your own approach. 

I'm not saying diat SOA reference-any- 
diing is bad. If you find diey work for you, 
have a party. However, with my clients, 
I've been finding diem both confusing and 
distracting, not to mention the entire ven- 
dor-driven architectures tiiat can be prob- 
lematic as well. The architects are more 
concerned with how the model relates to 
them — not how they relate to the model. 
In some instances, the reference models 
and architectures actually drive the wrong 
architecture, and derail the project. I 

David S. Linthicum is a managing part- 
ner at ZapThink. Reach him at 
david@zapthink.com. 
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The Java GUI Toolkit Flatline 



We are seeing the transformation of 
the client into an incredibly rich 
personal experience. 

AJAX, RIA and other Web 2.0 tech- 
nologies are driving new paradigms in the 
browser, while Windows Presentation 
Foundation (WPF) is similarly improving 
desktop GUI experiences on Wintel sys- 
tems. One technology that has not partic- 
ipated in this revolution is Java. In fact, its 
hard to recall any major stories regarding 
Java's built-in Swing toolkit or IBM's com- 
peting Standard Widget Toolkit (SWT). I 
find tills curious, because we all remem- 
ber how just a few years ago die rivalry 
between diese two camps was intense. 
Since then, the smoke has cleared, and we 
see tiiat die fires of innovation in both 
camps are on a very low flame. 

Swing, as most of you will recall, 
came out in 1998 with much fanfare as 
part of the Java 1.2 release. Its claim was 
remarkable breadth of functionality and 
a nearly infinite configurability. Any 
interface need of that period — no mat- 
ter how complex — could be done in 
Swing. And because Swing was 
skinnable, it could be made to approxi- 
mate the look-and-feel of Windows, 
Motif and other interfaces. But Swing 
had drawbacks: At the time, it was slow 
and its emulation of native widgets and 



controls was far from faithful. Moreover, 
Swing was difficult to program. 

In response, IBM developed SWT. 
The defining aspects of SWT were the 
use of native widgets and simplicity of 
programming. In exchange, it gave up the 
full complement of functionality that 
Swing offered. Because the primary use 
case for SWT was the Eclipse 
IDE, the features left behind 
(such as truly rich text) were 
not likely to be terribly missed. 

When SWT came out, it 
was indeed faster than Swing, 
and it used native widgets. 
Shortly, the JFace library 
appeared, which expanded 
SWT's power by providing 
higher-level constructs, while 
still allowing direct access to 
the lower-level controls. 

Since then, though, progress has con- 
sisted primarily of refining the underly- 
ing technology rather than advancing it, 
and porting to new platforms. Swing, for 
example, now runs very fast and has an 
interface that is faithful to the underly- 
ing look-and-feel. If todays Swing had 
been available when IBM began getting 
serious about Eclipse, I doubt SWT 
would have been funded or needed. 

SWT has not advanced much. Nor has 



Integration Watch 




IBM done much to encourage its use out- 
side of the Eclipse environment. At one 
time, developers were expecting a great 
flow of SWT apps, so that we'd have a 
Swing/SWT rivalry akin to the GTK ver- 
sus Qt competition in the Linux world. 
But the large flow of SWT apps never 
materialized. Most SWT apps are plug- 
ins to Eclipse, with a few 
notable standalone items, but 
certainly not many. One fac- 
tor, perhaps, is that the SWT 
native-widget approach occa- 
sionally runs into difficulties: 
A common complaint of Linux 
users of Eclipse is how poorly 
the interface works when run- 
ning on GTK widgets. 

Trolltech recently attempt- 
ed to deliver its innovations to 
Java desktop clients by releasing Qt Jam- 
bi, a Java wrapper for its remarkable Qt 
C++ library. This implementation works 
fine — its functionality is slightly greater 
than Swing's and its ease of use is compa- 
rable to SWT. The question is whether 
programmers will pay US$1,500 or more 
per target platform to develop widi Jam- 
bi. (The library is royalty-free.) The big 
advantage of Jambi is the company 
behind it: Trolltech develops only UIs, so 
more than either Sun or IBM, it will push 



forward with product features. 

The company that is innovating the 
most in UI interface design on desktops 
is not Apple, nor the Java folks, but, 
rather, Microsoft. Say what you will 
about the company's past UI efforts, but 
you cannot deny the improvement in 
Windows Vista nor the constant revving 
of widgets and controls that occurs with 
each release of Office. The trouble is 
that none of today's visual wizardry (and 
Microsoft Office definitely has some 
very interesting graphics features) is as 
elegant as NextStep was 10 years ago. 
Even Apple is still a full step behind 
NextStep on the desktop. 

There are movements afoot to try to 
integrate Swing and SWT, but I don't 
know how much real enthusiasm there is 
for convergence. Each constituency is 
content with what it has. These projects 
mostly tiy to make it possible to run 
Swing components in Eclipse. Surely, 
that's a worthwhile goal, but not anything 
that will push forward the state of die art. 
Odd as it might seem, for Java to advance 
on the desktop, we need the willingness 
to invest in the GUI that Microsoft has 
exhibited, Apple's panache, and for Java 
to find a common ground. And so, I 
expect truly great UIs are not an immedi- 
ate part of Java's future. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock.blogspot.com. 
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Free as in Constrained 



Industry Watch 



Among the efforts of the Software 
Freedom Law Center is to support 
open source and free software projects 
through its Software Freedom Conser- 
vancy arm. That group, led by Columbia 
University Law School's Eben Moglen, 
provides legal support and financial and 
administrative services to open source 
projects that have technical expertise but 
lack organizational resources. 

One of those projects is 
BusyBox, a suite of Unix-like 
tools typically used in embed- 
ded distributions that is cov- 
ered by the GNU General 
Public License. 

Meanwhile, a company 
called Monsoon Media admit- 
ted to embedding BusyBox 
code in its products but failed 
to release its proprietary code 
back to the community. 

So in September, the SFLC filed the 
first-ever lawsuit to claim that a piece of 
software violated terms of the GPL. After 
the suit was filed, Monsoon Multimedia 
said it would comply with the license, 
expecting the suit to be dropped. At first 
the SFLC rejected the offer, but in late 
October the sides reached an agreement. 

Some pundits claimed the leaders of 
the BusyBox project, not the SFLC 
itself, wanted to go to court. Yet Daniel 
B. Bavicher, the legal director of the 
SFLC, explained why the suit was 
important, at the first Legal Summit for 
Software Freedom, held in mid-October 
at the Columbia University Law School 
in New York City. 

"If we don't enforce them, rules lose 
their meaning," Bavicher told a gathering 
of developers, lawyers and free software 
advocates at the summit. Software needs 
to be born, nurtured and protected, he 




said, explaining what he called the life 
cycle of freedom. In the first stages after 
freedom is bom, there must be motiva- 
tions to spread that freedom. Those can 
be social, economic, religious or techno- 
logical, and it is not for advocates or oppo- 
nents of freedom to judge those motives. 
As freedom enters what Bavicher 
called "puberty," a structure starts to form 
and a transition from general 
principles to hard and fast 
rules occurs. At this point, it is 
imperative to define what is 
acceptable and what is not, he 
said. 

In software, these rules 
are commonly established 
through licenses, which 
Bavicher noted make the 
implementation of the ideas 
vWJj of the free software "bazaar" 
possible. Even back in the heady days of 
the mid-1980s, when Richard Stallman 
first put forth the notion of free (as in 
speech) software that would further com- 
puter science and add to the body of sci- 
entific knowledge, the fear of code being 
co-opted for a profit was real. Hence, the 
GNU General Public License was writ- 
ten. But Bavicher supposed there could 
be a risk to too much freedom. "This 
might be happening with the prolifera- 
tion of [open source] licenses. Growing 
too much might be inefficient." 

In any regard, after rules are formed, 
it is necessary to be able to defend 
against threats. For free software, this 
means going to court to protect your 
ability to use open code, and to ensure 
that open code is not misused. "There 
must be a consistency and fairness in the 
application of the rules," Bavicher 
explained. "There can be no special 
preferences based on wealth or skills." 



But not everyone plays by the same 
rules, which is why there was a need for 
a legal summit in the first place, and for 
attorneys touching any number of tech- 
nology areas to attend. Patent violations. 
Copyright infringements. Corporate law. 
Jurisdictional issues. 

Developers attending the Legal 
Summit sat in stunned silence as the 
attorneys debated these issues. They've 
been told that the responsibility for 
quality assurance testing has fallen to 
them. They've been told the responsibil- 
ity for application security rests on their 
shoulders. Now, they're being told that 
they should have an understanding of 
the legal ramifications of using every 
snippet of code retrieved from the 
Web — that they need to find out who 
wrote it, who that person works for, and 
if that person used code from some- 
where else. Is it now up to developers to 
perform that land of legal due diligence 
for every piece of open source code they 
desire to use? 

Which brings us back to the lawyers. 
With litigation that could cost millions, 
and even threaten the existence of 
smaller organizations, the retention of 
some sort of legal counsel becomes crit- 
ical. So does the use of some sort of 
intellectual property identification tool 
that combs software for licenses that 
might preclude the use of a bit of code 
in a project. 

So it seems the freedom life cycle, 
with so many licenses, rules and restric- 
tions placed upon that freedom, comes 
full circle. If a piece of open source 
code is licensed, and attorneys need to 
be engaged to make a determination as 
to how it can be used, and then IP pro- 
tection tools need to be run to ensure 
nothing is being violated, is it really 
free software? I 

David Rubinstein is editor-in-chief of 
SD Times. 




BUSINESS BRIEFS 




Microsoft has announced it will take a stake in Facebook and pro- 
vide advertising technology to the social networking site. Reports 
placed the stake at 5 percent of Facebook for a cost between 
US$300 million and $500 million, which would put the total valu- 
ation of Facebook at around $10 billion. Microsoft lost out on a 
similar deal with MySpace, the leading social networking site, to 
Google . . . Raining Data, an XML database management soft- 
ware provider, received notice of an irrevocable debt conversion 
notice from Astoria Capital Partners. The debt, placed at US$23 
million, would be met with shares of stock valued at $5 per share. 

EARNINGS: EMC reported record revenue and net income for its 
third-fiscal guarter 2007 and announced it has notched 17 
straight guarters of double-digit revenue growth. Revenue for 
the guarter was US$3.3 billion, a 17 percent gain from the $2.8 
billion reported for the same guarter in 2006. GAAP net income 
for the guarter was reported at $492.9 million, or 23 cents per 
share. In the prior year, GAAP net income was 13 cents per share. 
The net income reflects money generated from the sale of 6 mil- 
lion shares of VMware to Cisco Systems. "Among the many 



standouts during the quarter was VMware's quarterly perfor- 
mance and the completion of the initial public offering of approx- 
imately 10 percent of VMware," said Joe Tucci, EMC's CEO, chair- 
man and president. "VMware is not only one of the 
fastest-growing businesses in the history of the software indus- 
try, but it has also created an entire IT category based on one of 
the very few game-changing technologies out there today" 
. . . VMware, meanwhile, announced revenue of US$358 million 
and GAAP net income of $65 million, or 18 cents per share, for 
its first quarter as a publicly traded company . . . Compuware 
reported second-quarter 2008 revenue of US$302 million and 
net income of $49.6 million before restructuring charges. For the 
quarter, Compuware incurred $18.7 million in restructuring 
charges, and for the year to date, that total is now $34.8 million, 
for centralizing activities in the company's Detroit headguarters. 
The company's board of directors has approved the repurchase 
of $200 million of the company's stock . . . Sybase reported 
US$255.3 million in revenue for the third guarter of 2007, an 
increase of 22 percent over the same period in 2006. GAAP 
income was $34.1 million, or 37 cents per share. I 
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XML 2007 


Dec. 3-5 


Boston 




IDEALLIANCE 




2007.xmlconference.org 




Agile Development 


Dec. 3-6 


Practices Conference 




Orlando, Fla. 




SOFTWARE QUALITY ENGINEERING 


www.sqe.com/agiledevpractices 




Macworld Conference 


Jan. 14-18 


& Expo 




San Francisco 




IDG WORLD EXPO 




www.macworldexpo.com 




Southern California 


Feb. 8-10 


Linux Expo 




Los Angeles 




SCALE INC. 




www.socallinuxexpo.org 




Game Developers 


Feb. 18-22 


Conference 




San Francisco 




CMP MEDIA 




www.gdconf.com 




FutureTest 2008 


Feb. 26-27 


New York 




BZ MEDIA 




www.futuretest.net 




Emerging Technology 


March 3-6 


Conference 




San Diego 




O'REILLY MEDIA 




conferences.oreillynet.com/etech 




BrainShare 


March 16-21 


Salt Lake City 




NOVELL 




www.novell.com/brainshare 




EclipseCon 2008 


March 17-20 


Santa Clara 




ECLIPSE FOUNDATION 




www.eclipsecon.org/2008 




Secure Development 


March 25-26 


World 




Alexandria, Va. 




SDW 




www.securedevelopmentworld.com 




Developer Relations 


April 7-8 


Conference 




Redwood City, Calif. 




EVANS DATA 




www.evansdata.com/drc 




RSA Conference 


April 7-11 


San Francisco 




RSA 




www.rsaconference.com/2008/US 




MySQL Conference & Expo April 14-17 


Santa Clara 




MYSQL 




en.oreilly.com/mysgl2008 






April 14-18 


Conference 




San Jose 




CMP MEDIA 




www.embedded.com/esc/sv 




Software Test & 


April 15-17 


Performance Conference 


San Mateo, Calif. 




BZ MEDIA 




www.stpcon.com 




For a more complete calendar of U.S 


. software 


development events, see www.bzmedia.com/calendar. 


Information is subject to change. Send news about 


upcoming events to events@bzmedi 


.com. 
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Altova MtssiofiKit' 2008 - The secret to savings on top software took. 




^ ALTOVA* 

missionkit "" 20QS 



development excellence 

off with the Altova- Mission Kir, and uncover 
"to savings on top software tools. 



Spied in the Altova Miss ion Kit 2008: 



leading XML development tools; AltovEi XMLSpy", MapForce, EtyleVision ; 
ble options that add: Altova LIModer, DatabaseSpy*. DiflDog", SdhemaAgem 

irQduetS lor tess 
ap Force, and StvleVlsion at substantial savings, 
are available lhat add up to five additional application development, data management, 

"rvely free of charge, It's your firsi-class ticket to the power, speed, 
'- awaid- winning product fine. " 
Altova" Mis&ioiiKit 20OB toddy: w wv/,arrava.coffl 




SICK AND TIRED 



OF NRNUflL TESTING? 




TestComolete 



J- automate your tests 



TesuNET Delphi Java 

Web Automated Windows Test Desktop 

Load Easy Vista Test Synchronized 

Fast Distributed Powerful Client/Server 

Time-to-Market Tes BlackBox Automate 



| Record Test Checkpoints 

I Easy Grid Tests 



vM Better & Faster Web Tests 



| Test Your 64- bit Apps 



aVil Test Your Web Services 




FREE TRIAL- DOWNLOAD NOW 

w w w.testco m pi ete.com 



Automated QA 

teat, debug, deliverf^"* 
702-891-9424 



